When a Trusted npm Namespace Turns Into a Delivery Channel for Malware

Four AsyncAPI packages were reportedly republished with malicious releases described as a RAT-focused Miasma build, while automatic propagation was disabled.