The executable-stories-vitest npm package versions 2.0.1, 3.1.1, 4.0.1, 5.0.1, 6.1.1, 7.0.3, and 8.3.3 have been identified as containing malicious code associated with the Miasma malware. This malware propagates by abusing binding.gyp files to execute code during package installation, bypassing typical security inspections. It attempts to exfiltrate credentials and OIDC tokens for cloud and registry services and spreads by compromising other packages and repositories. No direct installer harm or lifecycle script behavior was confirmed in these versions, but the malware's propagation and credential theft capabilities pose significant risk.