AI Summary

A series of malicious AsyncAPI packages has been discovered on the Node Package Manager (npm), compromising the security of users who installed them. These compromised packages were distributed through a supply-chain attack, which allowed a remote access trojan with information-stealing capabilities to be delivered to affected users.

AI summaries can be wrong sometimes—always verify important details using the source article.