Threats Tagged 'mal-2026-5227'

The npm package autotel-playwright version 0.4.32 contains malicious code identified as the Miasma malware. This malware propagates by abusing weaponized binding.gyp files during package installation, bypassing typical security inspections. It attempts to exfiltrate credentials and OIDC tokens for cloud and registry services and spreads by compromising other packages and repositories. Systems with this package installed should be considered fully compromised, and secrets must be rotated immediately. Removal of the package alone may not eliminate all malicious components.