"The Miasma supply-chain attack toolkit has been open-sourced via compromised GitHub accounts. The toolkit allows for credential theft and lateral movement across various package registries. Security researchers note that the attack relies on GitHub infrastructure for command-and-control."