Compromised npm Packages in the AsyncAPI Namespace Deliver Miasma Botnet Loader

Four compromised AsyncAPI npm packages were used to stealthily deliver a multi-stage Miasma botnet loader across macOS, Linux, and Windows, leveraging trusted publishing workflows and IPFS to evade detection and establish persistent, cross-ecosystem command and control.