Upwind Finds Coordinated Supply Chain Campaign Compromising Multiple AsyncAPI npm Packages

Multiple high-risk incidents reported: Upwind links a coordinated supply-chain campaign that compromised multiple AsyncAPI npm packages, impacting repositories, publishing pipelines and developer systems; Proofpoint describes large-scale OAuth client ID spoofing campaigns probing Microsoft Entra accounts to test credentials and evade sign-in detections; Dr.Web reports a Siggen Windows backdoor spreading via infected Visual Studio projects, using Steam for C2 and stealing credentials/crypto; Microsoft warns of GigaWiper, a destructive Windows backdoor capable of wiping disks, encrypting files,及