Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Researchers from OX Security, SafeDep, Socket, and StepSecurity have discovered that four npm packages in the @asyncapi namespace have been compromised. These packages are distributing a multi-stage botnet loader. The affected packages include @asyncapi/generator-helpers, @asyncapi/generator-components, @asyncapi/generator, and @asyncapi/specs with specific version numbers. The compromised packages are delivering malware to unsuspecting users. The versions of the affected @asyncapi/specs package are v6.11.2 and v6.11.2-alpha.1. The other packages have version numbers 1.1.1, 0.7.1, and 3.3.1 respectively.