New Blog: Miasma Worm Infects Multiple LeoPlatform npm Packages

•

25 Jun 2026

sha256

a9a28f2e9f7e0348092682940b3bf63d47a63afc18eb8bfe628e5ddab0d73b47

discovered 2026-06-23

Obfuscated payload blob dist/bootstrap.js in @bytemend/mfebus 1.4.2 (277306 bytes).

Campaigns

wshu.net npm Credential-Stealer Campaignattributed-to

Linked packages

npm @bytemend/mfebusindicates

Read the full analysis →