Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware [email protected] (The Hacker News)

Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security, SafeDep, Socket, and StepSecurity.

The affected packages are listed below –