malware npm

warp-contracts-plugin-deploy-test

discovered 2026-06-03

IronWorm trojanized npm package published from compromised `asteroiddao` account.

Threat types

credential_stealer worm data_exfiltration

Malicious versions

  • 3.0.1

Campaigns