ASYNCAPI NPM PACKAGES HIT BY MALWARE SUPPLY-CHAIN ATTACK

Five malicious versions of AsyncAPI packages were published to npm, delivering a remote access trojan capable of stealing credentials and sensitive data from developer systems.