SHA-256

36ff00b45e67baa7e3674b0c80f48e88737264c61e5c6b3b091200972de8157c

Confidence: ai extracted

VirusTotal ↗ MalwareBazaar ↗

Source Articles 2

Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan

Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan

step-security Jul 28, 2026