SHA-256

26351aed0397158d3a3b8cc8fd3047d4c015d264c9895f10f20f1521b974ed18

Confidence: ai extracted
VirusTotal ↗ MalwareBazaar ↗

Source Articles 2

Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
socket-dev
Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan
step-security Jul 28, 2026