#joyfill

lazarusholic @lazarusholic@infosec.exchange

· 3mo ago

"Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan" published by StepSecurity. #NPM, #Joyfill

stepsecurity.io

Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan - StepSecurity

lazarusholic @lazarusholic@infosec.exchange

· 3mo ago

"Joyfill npm Packages Compromised with Blockchain C2 Loader" published by SafeDep. #SupplyChain, #NPM, #PolinRider, #Joyfill

safedep.io

Joyfill npm Packages Compromised with Blockchain C2 Loader

Malicious beta versions of @joyfill/components and @joyfill/layouts published on July 28, 2026 carried the PolinRider blockchain dead drop loader inside their…

You've seen all posts