​ ​AsyncAPI npm packages infected with credential-stealing malware

Five malicious versions of AsyncAPI npm packages were published in a supply-chain attack that delivered a remote access trojan with credential and information-stealing capabilities. The attacker…