NPM ecosystem hit with two new supply chain compromises
CSO Online 24 views
Topic timeline
Asyncapi
How reporting on this topic developed over time — coverage by day, outlet counts, and multi-source storylines where they exist.
Coverage evolution
How reporting on this topic developed
- Tracked since
- Jul 15
- Latest update
- Jul 15
- Outlets
- 3
- Stories
- 3
Coverage milestones derived from tracked reporting — how many outlets reported and when, not verified real-world events.
-
First detected
Coverage first appeared in the tracked window.
Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware The Hacker News · Jul 15, 2026 -
Coverage accelerated
3 new reports from 3 independent sources in the past 24 hours.
-
Current status
Now classified as Monitoring.
-
Latest update
Most recent tracked report from CSO Online.
NPM ecosystem hit with two new supply chain compromises CSO Online · Jul 15, 2026
Jul 15, 2026
3 reports 3 outlets — BleepingComputer, CSO Online, The Hacker News
