IronWorm Masquerades as AI Assistant to Compromise Developer Credentials

IronWorm represents a watershed moment in supply chain attacks by impersonating trusted AI coding assistants in git commits while harvesting Anthropic and OpenAI API keys—credentials with immediate monetary value and potential for lateral escalation. The attack also exposes a critical weakness in npm's Trusted Publishing: provenance signatures can be forged through CI/CD pipeline compromise, making them insufficient as standalone trust signals for package integrity.