Compromised AsyncAPI npm packages distribute multi-stage botnet loader

Threat actors injected malicious code into five versions of four AsyncAPI npm packages, successfully bypassing security checks by including valid provenance attestations. The malware executes upon module loading rather than installation, indicating a sophisticated supply chain compromise that undermines trust in automated build verification.