The Miasma malware campaign compromised an npm maintainer account to publish poisoned updates to over 20 packages. The attack targets developer workstations and CI runners to harvest sensitive credentials like AWS, Azure, and GitHub tokens. The malware uses the Bun JavaScript runtime to evade detection by security software.