sync.js

Coordinated AsyncAPI Supply Chain Attack: Miasma RAT Delivered via Compromised CI/CD Pipelines in Two Repositories

M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions

Compromised AsyncAPI npm packages: inside a CI supply-chain attack

The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)

Compromised npm Packages in the AsyncAPI Namespace Deliver Miasma Botnet Loader

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware