New IronWorm malware hits 36 packages in NPM supply-chain attack | Dark Hacker News