New IronWorm malware hits 36 packages in npm supply-chain attack
(bleepingcomputer.com)
1.
2.
3.