Eight days after the Miasma worm injected a 4.3 MB credential stealer into public GitHub repositories, 123 repositories across 56 accounts still carry the live dropper on 665 branches, according to a …
Adversa's Q2 2026 AI Risk Quadrant Report, published June 3, found that 98% of production agent systems carry the "lethal trifecta" — access to private data, exposure to untrusted content, and the abi…
GitHub disabled 73 repositories across four Microsoft organizations — Azure, Azure-Samples, Microsoft, and MicrosoftDocs — after the self-replicating Miasma worm planted malicious payloads that harves…
A single unsigned commit to the `icflorescu/mantine-datatable` repository added six files, five of which serve as launchers that execute a 4.3 MB dropper at `.github/setup.js`. The dropper, obfuscated…
On June 3, 2026, attackers pushed malicious commits to the GitHub repository `icflorescu/mantine-datatable` and four sibling repos, planting a 4.3 MB payload from the Miasma worm family. The commit ad…
An attacker compromised 57 npm packages across 286+ malicious versions in a two-hour campaign on June 3, 2026, targeting the official Vapi.ai voice AI server SDK with 408,000+ monthly downloads and do…