IronWorm malware hijacks 36 npm packages via Rust binaries
Researchers discovered IronWorm, a Rust‑written infostealer that infected 36 npm packages, delivering binary payloads through post‑install scripts. The campaign stole environment variables, cloud credentials, and crypto wallets, but was mitigated after JFrog flagged the malicious packages, which had about 32 k monthly downloads.