malware
npm
@asyncapi/generator-helpers
discovered 2026-07-14Compromised alongside @asyncapi/generator. Same whitespace-hidden payload in src/utils.js. Published 2026-07-14T07:10:42Z. ~45,000 weekly downloads.
Threat types
credential_stealer rat c2_agent data_exfiltration persistence
Malicious versions
- 1.1.1
