The Miasma v3 worm compromised four AsyncAPI npm packages (@asyncapi/generator, @asyncapi/generator-helpers, @asyncapi/generator-components, and @asyncapi/specs) by leveraging an unauthorized commit to the repository's release branch. The attacker used the legitimate GitHub Actions workflow with npm's OIDC integration to publish malicious versions with valid provenance attestations. Unlike previous Miasma variants, this version triggers upon library load rather than installation. It downloads a second-stage payload from IPFS, establishing a persistent Node.js backdoor that allows arbitrary shell command execution. While the malware includes capabilities for credential theft, propagation, and AI-tool poisoning, this deployment mainly functions as a remote access trojan. The incident highlights the importance of branch protection controls even when using trusted publisher workflows.

The compromised packages enable attackers to establish a persistent backdoor on systems that load the poisoned libraries, allowing arbitrary shell command execution. This can lead to remote access, potential credential theft, lateral movement, and further compromise of affected environments. The attack undermines trust in the supply chain by abusing legitimate publishing workflows and valid provenance attestations. Although no active exploits in the wild have been reported, the presence of advanced capabilities in the malware codebase indicates a significant potential risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Organizations should verify the integrity of AsyncAPI npm packages before use and monitor for updates from AsyncAPI regarding remediation. Additionally, enforcing strict branch protection on release branches and reviewing CI/CD workflows for unauthorized changes are critical to prevent similar supply chain compromises. Since this attack abuses legitimate publishing workflows, relying solely on provenance attestations is insufficient without additional controls.