Miasma Toolkit Hijacks GitHub Orphan Commits to Poison AI Coding Tools

Miasma uses GitHub commit searches and orphan-commit hijacking in Actions to inject malicious payloads into Claude, Cursor, and VSCode. The attack targets secrets in cloud platforms and password managers, then propagates via npm, PyPI, and RubyGems using OIDC or stolen tokens.