Beta release versions of two npm packages in the joyfill namespace have been compromised to deliver a remote access trojan RAT associated with the DEVPOPPER malware family. The list of affected packages is as follows joyfilllayouts0.1.22773.beta.0 joyfillcomponents4.0.0rc242773beta.4 The two packages "contain an importtime JavaScript implant that resolves encrypted code.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity