npm

Rust Stealer IronWorm and New Miasma Worm Infect Dozens of npm Packages

Security firms say attackers abused maintainer and GitHub accounts to push install‑time malware that steals developer and cloud secrets.