IronWorm Malware Targets Arweave Ecosystem via Compromised npm Packages
- Malware Propagation: Attackers embedded an infostealer named IronWorm in 36 npm packages linked to the Arweave ecosystem, which activates automatically upon installation, targeting developer credentials, SSH keys, and Exodus crypto wallet files, posing a significant threat to developer security.
- Attack Source Tracking: Security firm JFrog traced the attack back to a compromised maintainer account called 'asteroiddao', part of the Arweave/WeaveDB project, where attackers republished packages containing a 976 KB malicious file that executed automatically via a preinstallhook, leading developers to inadvertently install the malware.
- Backdoor and Concealment: IronWorm deployed an eBPF kernel rootkit to hide on infected machines and communicated with its operator through the Tor network; JFrog discovered that the source code of the rootkit was inadvertently left in the malware binary, making analysis easier and indicating an operational oversight by the attackers.
- Developer Response Measures: Security firm Ox Security noted that the attack was caught early before it could spread to more npm packages, prompting affected developers to rotate all credentials, check lock files for unexpected version changes, and enable two-factor authentication on npm and GitHub accounts to enhance security.
Get Real-Time Alerts for Any Crypto Movement
Technical Analysis for AR
Technical Sentiment Analysis for Arweave (AR). As of , Arweave (AR) is exhibiting a Neutral technical sentiment. Our proprietary analysis, which aggregates 3 technical signals, shows that 1 indicators are flashing buy, while 2 are indicating sell.
Momentum Indicators: RSI, MACD & Overbought/Oversold Status. Currently, the Relative Strength Index (RSI) for AR stands at -, which suggests a Neutral condition. Meanwhile, the MACD (12, 26) indicator is at -, providing a Neutral signal for short-term momentum. Other oscillators like the Stochastic Oscillator at - and the Commodity Channel Index (CCI) at - further confirm a - outlook for the crypto.
Support, Resistance & Moving Averages. From a structural perspective, AR is trading below its 60-day moving average of $- and below its 200-day long-term moving average of $-. Key price levels to watch include the immediate resistance at $- and strong support at $-. A break above $- could signal a bull continuation, while falling below $- may test the next Fibonacci floor at $-.
Arweave (AR) Support & Resistance Level
| Name | S3 | S2 | S1 | Pivot Points | R1 | R2 | R3 |
|---|---|---|---|---|---|---|---|
| Classic | 1.392 | 1.576 | 1.776 | 1.96 | 2.16 | 2.344 | 2.544 |
| Fibonacci | 1.576 | 1.723 | 1.813 | 1.96 | 2.107 | 2.197 | 2.344 |
About AR
About the author
