Executive Summary
The Miasma threat actor has launched a sophisticated npm supply chain campaign, compromising at least 57 packages and over 286 malicious versions within a two-hour window. The campaign employs a novel execution method dubbed 'Phantom Gyp,' where code execution is triggered via a malicious `binding.gyp` file during `npm install`, bypassing security tools that only monitor `package.json` scripts. Major targets include the official Vapi.ai SDK and numerous packages by maintainer `jagreehal`.
The attack chain involves a four-stage obfuscated payload that downloads a standalone Bun runtime to execute a credential harvester outside of Node.js monitoring. Beyond stealing multi-cloud credentials (AWS, GCP, Azure) and GitHub tokens, the malware poisons AI coding assistant configurations (Claude, Cursor, Gemini) by injecting persistent backdoors into developer environments. The worm also attempts to forge Sigstore provenance to maintain legitimacy. This campaign represents a high-urgency threat due to its self-propagating nature and its focus on poisoning modern AI-driven development workflows.