Slow Fog: The new Rust supply chain malicious activity IronWorm is attacking the Web3 ecosystem through npm packages
By: rootdata|2026/06/04 20:45:01
0
Share
According to SlowMist monitoring, a new type of Rust supply chain malware activity named IronWorm is attacking developer environments and the Web3 ecosystem through malicious npm packages. Potential attack behaviors include credential theft, wallet mnemonic and password theft, GitHub repository tampering, malicious package publishing, CI/CD secret leakage, Tor-based command control, and eBPF rootkit stealth.
Security teams should audit the repository for backtracked commits, suspicious branches, unexpected build hooks, and commits from automated identities such as claude, dependabot, renovate, or github-actions. It is recommended to remove or deprecate affected package versions, publish clean versions, rotate all leaked keys and tokens, review GitHub Actions artifacts, and rebuild potentially compromised development or CI systems from clean images.
You may also like
Bitcoin Price Prediction July 2026: Will BTC Recover to $70K or Drop Below $55K?
Bitcoin price prediction for July 2026: Can BTC recover to $70,000 or fall below $55,000? Explore ETF flows, key support levels, Fed outlook, and our Bitcoin forecast.
A South Korean company that learned the strategy of hoarding coins, from a bull market to delisting?
When the overall momentum of the Korean stock market is strong, this batch of cryptocurrency concept stocks, branded as the "Korean version of Strategy," finds itself at a crossroads of life and death.
Where is Zhao Changpeng's billion-dollar investment going? YZi Labs' investment landscape fully revealed
Zhao Changpeng's billion-dollar new "family office" YZi Labs investment landscape revealed: 70% of the funds are committed to the crypto ecosystem, while 30% are cross-industry bets on AI and biotechnology, launching a new capital experiment in the post-Binance era.
Semiconductor stocks plummet, yet Anthropic wants to create a 2nm chip
Abandoning TSMC and teaming up with Samsung. Anthropic launches a self-developed 2nm chip program, challenging Nvidia and starting a battle to break through computing power costs.
WEEX API Broker Program: Turn Your Trading Platform Into a Revenue Engine
Become a WEEX API Broker and earn up to 70% trading fee sharing. Get institutional-grade liquidity, OAuth Fast Connect, and a 4-5 day integration for your AI trading platform, bot, or signal community.
How to choose between buying discounted ETH, Bitmine, and SharpLink?
The answer may not lie in whose story is told better, but in specific dimensions such as cost of holding, financing ability, liquidity, and whether the narrative can be realized.
Do you want to buy CRCL?
A detailed breakdown of Circle's business fundamentals and valuation logic: The panic over OUSD and the market correction have triggered a short-term mispricing, presenting an opportunity for left-side positioning and legislative speculation below $60.
Wosh: Inflation has cooled in recent weeks, AI is reshaping the economy, and forward guidance has lost its necessity
Federal Reserve Chairman Waller clearly stated at the ECB forum that the Fed will abandon forward guidance on interest rates, with future decisions relying entirely on real-time economic data. He noted that inflation risks in the U.S. have decreased over the past four weeks, but the ultimate impact ...
The most secretive AI winner
A century-old company that sells toilets and produces MSG has seen its stock price soar by "positioning" core materials for AI chips. This article clarifies the explosive opportunities for domestic substitution of semiconductor materials in the A-share market.
Looking at Stripe's ambitions and the future of stablecoins from OUSD
Stripe enters the stablecoin network battle with OUSD, a comprehensive look at the third paradigm evolution of digital dollars and the new infrastructure for global payments in the AI era.
From Pump.fun to Collector Crypt: Has Solana's income throne changed hands?
The revenue from consumer applications on Solana is no longer solely reliant on meme coin issuance, but is gradually spreading to more consumption scenarios.
Dan Bin's latest speech: Don't miss out on a great era
Don't let hesitation trap your steps, and don't let shortsightedness waste the passing years—make sure not to miss this magnificent era that belongs to us.
Robinhood launches its own blockchain, no longer wanting to be a tenant on others' chains
While laying off employees and issuing bonds, it is the predictive market business that temporarily supports the income.
Why Tokenized Stocks Are Booming in 2026 While Crypto Is Still Struggling
Why are tokenized stocks booming while the crypto market struggles? Explore the latest 2026 data, institutional adoption, and what it means for traders.
Former ByteDance employee's account: How I started with two Pinduoduo hard drives and made six times the profit with Seagate to achieve financial freedom?
A programmer from a big tech company bought hard drives on Pinduoduo and, following clues, managed to accurately capture the sixfold rising stock Seagate using the "finding daily anomalies + 13F institutional verification" framework, making a wild profit of $400,000 and achieving financial freedom.
MiCA reshuffle begins, Binance temporarily bids farewell to the EU
What Binance leaves behind is not scattered retail investors, but a whole batch of high-value users who are forced to liquidate and have almost nowhere to go.
How does Gate redo "buying and selling stocks" from the cryptocurrency world to the stock market?
The competition logic of exchanges has changed.
Visa and Mastercard join 140 giants to launch a new stablecoin, but the impact on the market landscape may still be limited
As an important milestone event in the stablecoin landscape, OUSD is likely to change the existing stablecoin landscape and significantly increase the adoption rate of stablecoins in the global financial system.
Bitcoin Price Prediction July 2026: Will BTC Recover to $70K or Drop Below $55K?
Bitcoin price prediction for July 2026: Can BTC recover to $70,000 or fall below $55,000? Explore ETF flows, key support levels, Fed outlook, and our Bitcoin forecast.
A South Korean company that learned the strategy of hoarding coins, from a bull market to delisting?
When the overall momentum of the Korean stock market is strong, this batch of cryptocurrency concept stocks, branded as the "Korean version of Strategy," finds itself at a crossroads of life and death.
Where is Zhao Changpeng's billion-dollar investment going? YZi Labs' investment landscape fully revealed
Zhao Changpeng's billion-dollar new "family office" YZi Labs investment landscape revealed: 70% of the funds are committed to the crypto ecosystem, while 30% are cross-industry bets on AI and biotechnology, launching a new capital experiment in the post-Binance era.
Semiconductor stocks plummet, yet Anthropic wants to create a 2nm chip
Abandoning TSMC and teaming up with Samsung. Anthropic launches a self-developed 2nm chip program, challenging Nvidia and starting a battle to break through computing power costs.
WEEX API Broker Program: Turn Your Trading Platform Into a Revenue Engine
Become a WEEX API Broker and earn up to 70% trading fee sharing. Get institutional-grade liquidity, OAuth Fast Connect, and a 4-5 day integration for your AI trading platform, bot, or signal community.
How to choose between buying discounted ETH, Bitmine, and SharpLink?
The answer may not lie in whose story is told better, but in specific dimensions such as cost of holding, financing ability, liquidity, and whether the narrative can be realized.
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com
