Miasma LeoPlatform npm Publish via Compromised Accounts czirker/llxlr

Ibrahim Saud@tektrix

•updated Jun 27, 2026•0•0•3

Detects unauthorized npm package publish events or file uploads associated with compromised maintainer accounts (czirker, llxlr) and specific malicious packages linked to the Miasma Mini Shai-Hulud supply chain attack.