Miasma Compromised npm Maintainer czirker or llxlr Publishing Malicious LeoPlatform Packages

Ibrahim Saud@tektrix

•updated Jun 26, 2026•0•0•2

Detects unauthorized npm package publication events triggered by specific compromised maintainer accounts (czirker, llxlr) associated with the Miasma/Mini Shai-Hulud supply chain attack campaign, specifically targeting LeoPlatform or Verana Blockchain related packages.