Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

Reported 27 Jun 2026 by otx · Severity: medium

A fresh wave of the Miasma Mini Shai-Hulud supply chain campaign compromised legitimate npm packages under the @immobiliarelabs scope on June 26, 2026. The attack targeted Backstage plugins used for GitLab integration and LDAP authentication, affecting 22 package versions across