Upwind Finds Coordinated Supply Chain Campaign Compromising Multiple AsyncAPI npm Packages
Tue Jul 14 2026
Development
Malware
Open Source
hackread.com
Upwind links compromised AsyncAPI npm packages to a coordinated supply chain attack spanning repositories, publishing pipelines, and developer systems at risk.