Miasma npm Supply Chain Attack: Self-Spreading Worm via Phantom Gyp

A novel, self-spreading npm supply chain worm dubbed "Miasma" exploits binding.gyp to silently execute malicious code during package installation, bypassing traditional security checks and rapidly compromising developer credentials, CI/CD secrets, and AI coding assistant configs across multiple ecosystems.