Skip to main content
AVOID.NET

Version history

Every immutable snapshot of IronWorm npm Supply Chain Attack. A new version is saved each time the page changes, with the reason it changed. Pick two versions to see exactly what changed.

Compare→
  1. v2currentTrust score: 02026-11-02 09:23:11Z

    Fact-check reviewFact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score did not change.

    hash: 8352e555174d…changes from v1
  2. v1Trust score: 02026-10-16 15:57:50Z

    Community evidenceA moderator accepted a piece of community-submitted evidence: BleepingComputer confirms IronWorm infected 36 npm packages via the compromised 'asteroiddao' account, hides via an eBPF kernel rootkit, communicates over Tor, abuses Trusted Publishing credentials to self-propagate, and targets Exodus wallet files, matching the submission exactly. Trust score now 0.

    hash: 8XVUkjeidX9w…