Rust Malware IronWorm Found in 36 npm Packages with eBPF Rootkit16. June 2026CybersecurityShare on:IronWorm leverages a Rust-based eBPF rootkit to steal developer credentials (OpenAI, Anthropic APIs, AWS certificates, npm tokens, SSH keys) and autonomously propagate itself across npm accounts. Share on: