IronWorm malware plants rootkit in Arweave ecosystem npm libraries
Attackers planted an infostealer inside 36 npm packages linked to the Arweave ecosystem. It targeted developer credentials, SSH keys, and Exodus crypto wallet files. Security firm JFrog trace







