Archive
Every issue, open. One attack, one rule, one move worth shipping.
CI/CD
+4
Jul 21, 2026
•
4 min read
Your release pipeline will vouch for malware
AsyncAPI's own release pipeline published five npm versions with malware in them, each with valid provenance.
