discovered 2026-07-14
SHA-256 of @asyncapi/generator-components-0.7.1.tgz (malicious npm tarball, SafeDep).