Threat actors published the source code for Miasma, a credential-stealing worm targeting software supply chains, across multiple compromised GitHub accounts. The worm harvests credentials from cloud and CI/CD environments and uniquely targets AI coding tool configurations used by developer teams, meaning malicious code can propagate through AI-assisted development workflows. Organizations with developer populations relying on npm, PyPI, GitHub Actions, or AI coding assistants face an elevated and widening threat window as lower-sophistication actors adopt the leaked code to launch derivative campaigns.