The autotel-subscribers npm package contains malicious code identified as the Miasma malware, a self-propagating worm that spreads by abusing weaponized binding.gyp files during package installation. This malware attempts to exfiltrate credentials and OIDC tokens for cloud and registry services and propagates by compromising other packages or committing backdoor files to GitHub repositories. Any system with this package installed should be considered fully compromised, and all secrets and keys must be rotated immediately. Removing the package alone may not eliminate all malicious software resulting from the infection.