The discord-search npm package versions 0.1.1 and 0.1.2 contain malicious code linked to the Miasma malware. This malware is a self-propagating worm that spreads by abusing weaponized binding.gyp files to execute code during package installation, bypassing typical security inspections. It attempts to exfiltrate credentials and OIDC tokens for cloud and registry services and propagates by compromising other packages or committing backdoors to GitHub repositories.