The npm package awaitly-visualizer contains malicious code or depends on a package with malicious code. This malware, identified as Miasma, is a self-propagating worm that spreads through the npm registry by exploiting weaponized binding.gyp files to execute code during package installation. It attempts to exfiltrate credentials and OIDC tokens for cloud and registry services and propagates by compromising other packages or injecting backdoors into GitHub repositories. Multiple specific versions of awaitly-visualizer are affected.