Rust-Written IronWorm Hits NPM Supply Chain

A DarkReading roundup highlighting multiple active, high-impact threats: supply-chain malware (Rust-written IronWorm targeting NPM; Megalodon pushing malicious commits to thousands of GitHub repos) and credential-stealing campaigns that propagate through developer tooling. Active exploitation and urgent patching needs are reported (a PAN-OS GlobalProtect authentication-bypass under active exploit), alongside expanding phishing-as-a-service and TDS operations (Kali365, DriveSurge delivering ClickFix/FakeUpdate). Attackers are increasingly using AI to automate EDR evasion and accelerate exploit/