MUST READ

AsyncAPI npm Supply Chain Attack: Malware Injected Into Packages With 2 Million Weekly Downloads

 | 

U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog

 | 

SonicWall warns of active exploitation of two SMA 1000 zero-days

 | 

Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month

 | 

U.S. Treasury Sanctions VPN Provider and Cryptor Seller Behind Billions in Ransomware Losses

 | 

Attacker Used AI to Build Custom PowerShell Recon Malware

 | 

Malware Hits Japan's Largest Taxi Company Nihon Kotsu, Services Temporarily Suspended

 | 

CrashStealer: New macOS Infostealer Uses Signed Apps to Evade Gatekeeper

 | 

Lidl Notified Online Shop Customers in Germany, Belgium, and the Netherlands of a Data Breach

 | 

U.S. CISA adds a Cisco IOS flaw to its Known Exploited Vulnerabilities catalog

 | 

EU Targets FSB-Linked Hackers in New Sanctions Over Cyber Sabotage

 | 

Dutch Nationals Suspected in Odido Hack That Exposed Six Million Customers

 | 

Australia Alerts Organizations to Ongoing CMS Exploitation Attacks

 | 

Ryuk Ransomware Member Pleads Guilty Over Attacks on U.S. Organizations

 | 

Progress Told ShareFile Customers to Pull the Plug on Their Servers. Here's What We Know.

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 105

 | 

Security Affairs newsletter Round 585 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

U.S. CISA adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog

 | 

Critical U-Boot Bugs Undermine Secure Boot on Millions of Devices

 | 

Update Now: Critical Zimbra Classic Web Client Flaw Could Expose Mailboxes

 | 

AsyncAPI

Pierluigi Paganini July 15, 2026
AsyncAPI npm Supply Chain Attack: Malware Injected Into Packages With 2 Million Weekly Downloads

AsyncAPI npm packages with 2M weekly downloads were compromised, spreading malware with info-stealing, crypto-theft and RAT capabilities. OX Security researchers disclosed on July 14 that the AsyncAPI npm organization was compromised, with malicious code injected into four packages that together account for over 2 million weekly downloads. The affected versions are @asyncapi/generator 3.3.1, @asyncapi/generator-components 0.7.1, […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

AsyncAPI npm Supply Chain Attack: Malware Injected Into Packages With 2 Million Weekly Downloads

Security / July 15, 2026

U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog

Security / July 15, 2026

SonicWall warns of active exploitation of two SMA 1000 zero-days

Hacking / July 15, 2026

Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month

Security / July 14, 2026

U.S. Treasury Sanctions VPN Provider and Cryptor Seller Behind Billions in Ransomware Losses

Security / July 14, 2026