Security News Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware TheHackerNews Daniel Bender 15 Jul 2026 Share Four compromised AsyncAPI npm packages load a multi-stage botnet from IPFS after attackers abuse GitHub Actions, despite valid provenance attestations
