The awaitly-visualizer npm package versions listed are affected by the Miasma malware, a self-propagating worm that abuses weaponized binding.gyp files to achieve execution during package installation, bypassing security tools that only inspect lifecycle scripts. Upon execution, it attempts credential and OIDC token exfiltration for various cloud and registry services and propagates by compromising other packages managed by stolen accounts or committing backdoor files to GitHub repositories. This threat leverages the npm ecosystem for propagation and credential theft.

Malicious code execution during package installation can lead to credential and OIDC token theft for cloud and registry services. This enables further compromise of developer accounts and repositories, potentially leading to widespread supply chain attacks and unauthorized access to cloud resources. The malware's propagation mechanism increases the risk of infection across multiple packages and projects.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or removal of malicious versions is confirmed, avoid using the affected versions of awaitly-visualizer. Verify package integrity through trusted sources and consider using alternative packages or versions not listed as affected. Monitor for updates from the package maintainers or npm security advisories regarding remediation.