Featured · 2026-07-14

27 Lines to Miasma: Inside the AsyncAPI npm Compromise.

Static decryption of the Miasma backdoor shipped in @asyncapi/specs@6.11.2, including its remote shell, persistence, update channels, and unusual release provenance.

15 min read· read →
Recent posts
2026-07-14 27 Lines to Miasma: Inside the AsyncAPI npm Compromise 15 min 2026-06-08 Four Payloads in One `npm install`: The `coindefi2026` Campaign 15 min 2026-05-22 ClickFix Edition 2: Ten Seconds of Forensic Evidence 14 min 2026-05-12 ClickFix on macOS: What Apple Events Tells You (and What It Doesn't Anymore) 12 min 2026-05-05 The 12-Minute Help Desk: Tracking the SNOW Suite 8 min