Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Four compromised npm packages in the @asyncapi namespace are distributing multi-stage botnet malware, according to findings from OX Security, SafeDep, Socket, and StepSecurity. The affected packages include @asyncapi/generator-helpers, generator-components, and specs versions. The multi-stage botnet loader poses a significant supply chain security risk.