Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js
- Posted on July 29, 2026
- By The Hacker News
- 0 Views
- 1 min read
In brief
Generating AI summary…
Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js
Two @joyfill npm beta packages run an import-time implant that uses Tron, Aptos, and BSC to deliver a DEV#POPPER-linked Node.js RAT.
