@asyncapi/generator-components version 0.7.1 and earlier versions 0.3.2 and 0.3.3 were compromised in a supply-chain attack known as the "Miasma RAT" campaign. Malicious code was hidden using whitespace obfuscation and executed on package installation, downloading and running a remote access trojan (Miasma RAT). This malware steals sensitive credentials and secrets, establishes persistence, and communicates with a command-and-control server. The last known safe version is 0.7.0. Removal of the package alone may not fully remediate the compromise due to persistence mechanisms.