#NPM: New "#IronWorm" supply-chain attack: 30+ npm packages from @ #asteroiddao shipped a malicious #Rust binary firing on preinstall stealing developer credentials, tokens, secrets and self-propagating.
#malware
#SoftwareSupplyChainSecurity
👇
https://cyberpress.org/ironworm-targets-developer-secrets/