← IronWorm npm Supply Chain Attack2 versions
Version history
Every immutable snapshot of IronWorm npm Supply Chain Attack. A new version is saved each time the page changes, with the reason it changed. Pick two versions to see exactly what changed.
- v2currentTrust score: 02026-11-02 09:23:11Z
Fact-check reviewFact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score did not change.
hash: 8352e555174d…changes from v1 - v1Trust score: 02026-10-16 15:57:50Z
Community evidenceA moderator accepted a piece of community-submitted evidence: BleepingComputer confirms IronWorm infected 36 npm packages via the compromised 'asteroiddao' account, hides via an eBPF kernel rootkit, communicates over Tor, abuses Trusted Publishing credentials to self-propagate, and targets Exodus wallet files, matching the submission exactly. Trust score now 0.
hash: 8XVUkjeidX9w…