Rust-Written IronWorm Hits NPM Supply Chain

**IronWorm** is a Rust-based supply-chain worm targeting the npm ecosystem that delivers cross-platform credential-stealing binaries via compromised maintainer accounts and typosquatted packages; stolen npm tokens, CI/CD secrets, and developer credentials are then reused to propagate the campaign, and organizations are advised to audit tokens, pin dependencies, monitor binary downloads, and review outbound connections.