Search

bleepingcomputer.com › news › security

New IronWorm malware hits 36 packages in npm supply-chain attack

New IronWorm malware hits 36 packages in npm supply-chain attack By Bill Toulas June 4, 2026 11:25 AM A new supply-chain attack has infected 36 packages on the Node Package Manager npm index with infostealer malware called IronWorm. …

Jun 4, 2026 · Bill Toulas

bleepingcomputer.com › news › security

Hola Browser for Windows compromised to deliver cryptominer

… Get the whitepaper Related Articles: DAEMON Tools trojanized in supply-chain attack to deploy backdoor New IronWorm malware hits 36 packages in npm supply-chain attack New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages Po… …

Jun 4, 2026 · Bill Toulas