malware npm
weavedb-warp-contracts-plugin-deploy
discovered 2026-06-03IronWorm trojanized npm package published from compromised `asteroiddao` account.
Threat types
credential_stealer worm data_exfiltration
Malicious versions
- 1.0.11
IronWorm trojanized npm package published from compromised `asteroiddao` account.
