#nodejs
-
Two @joyfill npm packages compromised: RAT fires the moment you import them
Malicious code has been found in the beta releases of the npm packages @joyfill/layouts and @joyfill/components; it pulls down a remote access trojan through blockchain transactions. According to Socket, North Korean hackers are behind the attack.