Storia in 3 fonti

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Four compromised AsyncAPI npm packages load a multi-stage botnet from IPFS after attackers abuse GitHub Actions, despite valid provenance attestations

Raccontata da

thehackernews.com

thenextweb.com

bleepingcomputer.com

Confronto fonti

3 prospettive sulla stessa storia

AI · summaries

thehackernews.comStai leggendo2 g fa

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Four compromised AsyncAPI npm packages load a multi-stage botnet from IPFS after attackers abuse GitHub Actions, despite valid provenance attestations

originale

bleepingcomputer.com2 g fa

AsyncAPI npm packages infected with credential-stealing malware

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that delivered a remote access trojan with info-stealing capabilities.

Leggi questa versione → originale

Timeline cronologica

martedì 14 luglio 2026·thehackernews.com
148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet
JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm it without updates.
martedì 14 luglio 2026·thenextweb.com
Upwind: AsyncAPI npm packages hit by supply chain attack
Upwind traces multiple compromised AsyncAPI npm packages to a coordinated supply chain attack targeting software release pipelines and publishing identities.

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

​ ​AsyncAPI npm packages infected with credential-stealing malware

Timeline cronologica

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

Upwind: AsyncAPI npm packages hit by supply chain attack

Upwind: AsyncAPI npm packages hit by supply chain attack

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

​ ​AsyncAPI npm packages infected with credential-stealing malware

AsyncAPI npm packages infected with credential-stealing malware

AsyncAPI npm packages infected with credential-stealing malware

AsyncAPI npm packages infected with credential-stealing malware