malware npm
create-arnext-app
discovered 2026-06-03IronWorm trojanized npm package published from compromised `asteroiddao` account.
Threat types
credential_stealer worm data_exfiltration
Malicious versions
- 0.0.10
IronWorm trojanized npm package published from compromised `asteroiddao` account.
