🧰 @asyncapi/specs

The items that name it 3

• Agentless Threat Detection: Illuminating Cloud Blind Spots
  articleas affected products2026-07-21It is written here as @asyncapi/specs (npm package).

  Malicious versions detected being installed, part of npm supply chain attack

• Coordinated AsyncAPI Supply Chain Attack: Miasma RAT Delivered via Compromised CI/CD Pipelines in Two Repositories
  writeupas classification.key entities2026-07-16
• M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions
  writeupas affected products2026-07-14

  Two additional malicious versions published after the pivot to asyncapi/spec-json-schemas.