13:25
2026-06-09
aikido.dev
ai-safety
Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System
A new variant of the Miasma worm has been discovered exploiting npm's binding.gyp build file to execute malicious code during package installation, bypassing traditional package.json script audits. Th…