AsyncAPI npm packages infected with credential-stealing malware
Teaser from the source
Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that delivered a remote access trojan with info-stealing capabilities. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on AsyncAPI
Other advisories
- Not ratedosv:MAL-2025-191452Malicious code in @eventcatalog/generator-asyncapi (npm)
- Not ratedosv:MAL-2025-190863Malicious code in @asyncapi/studio (npm)
- Not ratedosv:MAL-2025-190831Malicious code in asyncapi-preview (npm)
- Not ratedosv:MAL-2025-190800Malicious code in @asyncapi/php-template (npm)
- Not ratedosv:MAL-2025-190798Malicious code in @asyncapi/edavisualiser (npm)
- Not ratedosv:MAL-2025-190797Malicious code in @asyncapi/dotnet-rabbitmq-template (npm)
- Not ratedosv:MAL-2025-190799Malicious code in @asyncapi/keeper (npm)
- Not ratedosv:MAL-2025-190801Malicious code in @asyncapi/server-api (npm)
ID