14:34
2026-07-28
socket.dev
ai-tools
Two Joyfill npm Beta Releases Compromised With Blockchain-Backed Remote Access Trojan Loader
Two npm beta releases in the @joyfill namespace contain an import-time JavaScript implant that resolves encrypted code through Tron, Aptos, and BNB Smart Chain transactions, ultimately delivering a 77…