npm

weavedb-warp-contracts-plugin-deploy

IronWorm trojanized npm package published from compromised `asteroiddao` account.

discovered 2026-06-03

Threat types

credential_stealerwormdata_exfiltration

Malicious versions

  • 1.0.11

Campaigns