Blockchain Report on Nostr: IronWorm" supply chain attack targets 30+ npm packages from asteroiddao, compromising ...
IronWorm" supply chain attack targets 30+ npm packages from asteroiddao, compromising cloud/AI credentials. Malicious Rust binaries scan for 86 env vars & 20 credential types (AWS, GCP, Vault, npm, Anthropic, OpenAI keys). Also targets Exodus wallets. Uses eBPF rootkit, Tor for stealth. Propagates via npm OIDC. Commits disguised as legitimate tools (claude, dependabot, renovate). #security #supplychainattack #npm #cloudsecurity #AI
Published at
2026-06-04 00:19:11 UTCEvent JSON
{
"id": "2bd28d15b4494e169ccb04b3bba5dd247eeec8c903698c9732c863d33b67919b",
"pubkey": "c215990326b98e7fff0ccbc865c159332802d9fd39ffa281ec0f8949bd2a3113",
"created_at": 1780532351,
"kind": 1,
"tags": [],
"content": "IronWorm\" supply chain attack targets 30+ npm packages from asteroiddao, compromising cloud/AI credentials. Malicious Rust binaries scan for 86 env vars \u0026 20 credential types (AWS, GCP, Vault, npm, Anthropic, OpenAI keys). Also targets Exodus wallets. Uses eBPF rootkit, Tor for stealth. Propagates via npm OIDC. Commits disguised as legitimate tools (claude, dependabot, renovate). #security #supplychainattack #npm #cloudsecurity #AI",
"sig": "00967bb13881958062759ac812d535f25d870ac0abff6cb0f9cf7e2ac1f75158d870050fbd2ec2c0ccd537a442ed5959df53fa2c907358af6ec65f822a90afcf"
}
