Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and GitHub Actions, Expands to the Go Ecosystem

A sophisticated supply chain attack leveraging the Mini Shai-Hulud malware has rapidly expanded from npm and GitHub Actions into the Go ecosystem, targeting developer and CI/CD credentials, poisoning repositories and workflows, and persisting through IDE and AI coding assistant hooks to enable widespread credential theft and cross-ecosystem propagation.