#devpopper

· 3mo ago

"Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan" published by Socket. #SupplyChain, #NPM, #DevPopper, #OmniStealer

Two Joyfill npm beta releases contain an import-time implant that uses blockchain transactions to retrieve a remote-access trojan.

You've seen all posts