AsyncAPI npm packages infected with credential-stealing malware | CyberBlackmail