
The Hacker News
July 15, 20261 min read
Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security, SafeDep, Socket, and StepSecurity. The affected packages are listed below - @asyncapi/generator-helpers@1.1.1 @asyncapi/generator-components@0.7.1 @asyncapi/generator@3.3.1 @asyncapi/specs(v6.11.2, v6.11.2-alpha.1) "The
Read what's here, then head to the original whenever you're ready - never required.
Continue Reading on The Hacker NewsNew ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack
The Hacker News July 21, 2026