The github-archiver npm package versions 1.0.0 through 1.5.7 contain malicious code known as the Miasma malware. This malware executes during package installation by abusing weaponized binding.gyp files, bypassing typical security inspections. It attempts to exfiltrate credentials and OIDC tokens for cloud and registry services and propagates by compromising other packages or injecting backdoors into GitHub repositories. Systems with this package installed should be considered fully compromised, and all secrets should be rotated from a different machine.