Cybersecurity researchers have identified an evolution of the Miasma malware family, now targeting npm packages and GitHub Actions. This supply chain attack has compromised new npm packages, including LeoPlatform and RStreams, and has also propagated to the Go ecosystem. The abuse of GitHub Actions workflows indicates a sophisticated approach to compromise development pipelines.