Detection validation on three real-world campaigns from June 2026: - @redhat-cloud-services Miasma (32 packages) - TanStack Mini Shai-Hulud (84 versions) - Axios Backdoor (transitive injection)

Detectors: Self-propagation, encrypted C2, transitive deps, maintainer compromise.