malware npm
roidjs
discovered 2026-06-03IronWorm trojanized npm package published from compromised `asteroiddao` account.
Threat types
credential_stealer worm data_exfiltration
Malicious versions
- 0.1.7
IronWorm trojanized npm package published from compromised `asteroiddao` account.
