Resolvednpm (Node Package Manager)
IronWorm Infects 36 npm Packages with Rust Infostealer and eBPF Rootkit
IronWorm is a Rust-based npm supply chain worm that infected 36 packages via the asteroiddao account. It steals credentials, deploys an eBPF rootkit, communicates over Tor, and self-propagates via stolen npm tokens.