Miasma Worm: Bulk npm Publish by Compromised Maintainer czirker to LeoPlatform/LeoInsights

Ibrahim Saud@tektrix

•updated Jun 25, 2026•0•0•4

Detects anomalous bulk publication of NPM packages by a specific compromised maintainer account (czirker) targeting the LeoPlatform and LeoInsights organizations, indicative of malicious propagation behavior similar to the Miasma worm.