Technology ❯ Cybersecurity ❯ Malware ❯ Supply Chain Attacks

npm Ecosystem

Rust Stealer IronWorm and New Miasma Worm Infect Dozens of npm Packages

Security firms say attackers abused maintainer and GitHub accounts to push install‑time malware that steals developer and cloud secrets.

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign