Cybersecurity · 52 views
Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js
Two @joyfill npm beta packages run an import-time implant that uses Tron, Aptos, and BSC to deliver a DEV#POPPER-linked Node.js RAT.
AI Summary
Two compromised npm packages in the @joyfill namespace have been identified as delivering a remote access trojan (RAT) when imported into Node.js. These compromised packages, @joyfill/layouts and @joyfill/components, are beta release versions, specifically @joyfill/layouts@0.1.2-2773.beta.0 and @joyfill/components@4.0.0-rc24-2773-beta.4.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016Continue reading
- State Bank of India Suffers a Customer PII Data LeakContinue reading
- PHP2Shell exposes the weakness in coordinated vulnerability disclosureContinue reading
- Railway warns devs to rotate secrets after potential breachContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow