Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

The Miasma Mini Shai-Hulud supply chain attack compromised multiple legitimate @immobiliarelabs Backstage npm packages—including GitLab and LDAP authentication plugins—by injecting credential-stealing malware through release automation and GitHub Actions workflow abuse, posing a significant threat to developer and CI/CD environments.