#M_Red_Team
LightNews LightNews
threadlinqs.bsky.social
Valid SLSA provenance proved the workflow ran - not that the commit was clean. AsyncAPI's own pipeline shipped a RAT. https://intel.threadlinqs.com/threat/TL-2026-1360 #ThreatIntel #Miasma #AsyncAPI #M_Red_Team
AsyncAPI npm Supply Chain Attack: Pwn-Request GitHub Actions Compromise Deploys Miasma Tasking Framework
July 15, 2026 at 9:51 AM