​ ​AsyncAPI npm packages infected with credential-stealing malware

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that delivered a remote access trojan with info-stealing capabilities. The infected packages targeted developers, compromising credentials and system access. Users are advised to audit their dependencies and update to the latest secure versions immediately to mitigate the threat.