CERT24New IronWorm malware hits 36 packages in npm supply-chain attackLoading data…
CERT24Threat Observatory
Period

New IronWorm malware hits 36 packages in npm supply-chain attack

A new supply-chain attack infected 36 packages on the npm registry with the IronWorm infostealer malware. The malware targets environment variables and credential files that may contain OpenAI, AWS, Anthropic, and npm credentials, vault configuration files, SSH keys, and Exodus cryptocurrency wallet files.

← Back to intelligence

New IronWorm malware hits 36 packages in npm supply-chain attack

A new supply-chain attack infected 36 packages on the npm registry with the IronWorm infostealer malware. The malware targets environment variables and credential files that may contain OpenAI, AWS, Anthropic, and npm credentials, vault configuration files, SSH keys, and Exodus cryptocurrency wallet files.