The ‘Miasma’ worm source code briefly leaked on GitHub

GitHub announces npm security changes to tackle supply-chain attacks

GitHub pulls pin on npm's auto-run scripts

Miasma worms its way onto GitHub as attack kit goes open source