---
title: "Discussion on \"AsyncAPI Under Attack: When 2 Million Downloads Per Week Becomes a Way to Spread Malware\" | Hashnode"
description: "Discussion on \"AsyncAPI Under Attack: When 2 Million Downloads Per Week Becomes a Way to Spread Malware\". Campaign Summary\nOn July 14, 2026, attackers successfully compromised the AsyncAPI organization on npm — one of the most popular open source projects for event-driven APIs, and injected malicious code"
url: "https://hashnode.com/posts/asyncapi-under-attack-when-2-million-downloads-per-week-becomes-a-way-to-spread-malware/6a68718bdf6766cce66fbe99"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [AsyncAPI Under Attack: When 2 Million Downloads Per Week Becomes a Way to Spread Malware](https://blog.fiscybersec.com/asyncapi-under-attack-when-2-million-downloads-per-week-becomes-a-way-to-spread-malware?utm_source=hashnode&utm_medium=feed)

Campaign Summary On July 14, 2026, attackers successfully compromised the AsyncAPI organization on npm — one of the most popular open source projects for event-driven APIs, and injected malicious code

Jul 28 · 16 min read · blog.fiscybersec.com  
Read the article

-   [#npm-packages](https://hashnode.com/tag/npm-packages)
-   [#asyncapi](https://hashnode.com/tag/asyncapi)
-   [#info-stealer](https://hashnode.com/tag/info-stealer)
-   [#crypto-stealer](https://hashnode.com/tag/crypto-stealer)
-   [#rat](https://hashnode.com/tag/rat)
-   [#teampcp](https://hashnode.com/tag/teampcp)
-   [#software-supply-chain-security](https://hashnode.com/tag/software-supply-chain-security)
-   [#threat-intelligence](https://hashnode.com/tag/threat-intelligence)

## Written by

[Lưu Tuấn Anh](https://hashnode.com/@anhlt120)

@anhlt120

  
[View profile](https://hashnode.com/@anhlt120)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.