IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks
2026-06-06T01:24:14Z•afb1f794cd851a0d48f50ebe09c8e28810927ac55a903a7b3514e6460abb9ef6
Android‑spywareAsinCVE-2026-20230CVE-2026-23479CVE-2026-3300CVE-2026-45247China‑linkedCiscoEverest FormsIISIronWormKEVMagentoMiasmaOP-512PCPJackRedisSMTP relayWordPresscloud compromisemacOS malvertising','FlutterShell','phishing','malspam','double‑malwarenpmsupply-chainweb‑shell
What happened
Multiple high-impact threats were reported across web, cloud, mobile, and open-source ecosystems. Active supply-chain attacks hit npm (malicious/poisoned packages delivering a Rust info stealer and a self‑spreading worm), while Wordpress/Magento plugins and other server software are being actively exploited (Everest Forms Pro and Mirasvit Cache Warmer RCEs). Cisco Unified CM has an SSRF-to-root bug with public PoC, Redis fixed a use-after-free RCE found by an autonomous AI, and CISA added an exploited Magento RCE to its KEV catalog. Additional high-risk issues include a Microsoft 365 Android‑앱
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- afb1f794cd851a0d48f50ebe09c8e28810927ac55a903a7b3514e6460abb9ef6
- Enrichment time
- 2026-06-06T01:24:14Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.