malware
npm
ai3
discovered 2026-06-03IronWorm trojanized npm package published from compromised `asteroiddao` account.
Threat types
credential_stealer worm data_exfiltration
Malicious versions
- 0.3.5
IronWorm trojanized npm package published from compromised `asteroiddao` account.
SafeDep keeps analytics anonymous and cookie-free until you opt in. Accepting helps us understand product usage and improve your experience. Privacy Policy
Choose what you share. You can change this anytime from the footer.
