The 'mountly' npm package version 0.2.2 was found to contain malicious code or a dependency with malicious code linked to the Miasma malware. Miasma is a self-propagating worm that leverages weaponized binding.gyp files to execute during package installation, evading detection by security tools that focus on lifecycle scripts. The malware's payload includes exfiltration of credentials and OIDC tokens for various cloud and registry services. It further propagates by compromising other npm packages managed by the stolen accounts or by committing backdoor files to GitHub repositories, facilitating widespread infection within the npm ecosystem.

The malicious code in mountly 0.2.2 can lead to credential and token theft for cloud and registry services, potentially allowing attackers to gain unauthorized access to these services. The malware can propagate by compromising additional packages or repositories, increasing the scope of infection and risk within the npm ecosystem and associated development environments.

No official patch or remediation is currently documented for mountly 0.2.2. Users should avoid using this version of the package. It is recommended to audit dependencies for malicious code and monitor for suspicious activity related to credential exfiltration. Check vendor advisories or npm security advisories for updates or fixes. Since this is not a cloud service, remediation depends on users removing or replacing the affected package version.