Security News Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js TheHackerNews Daniel Bender 29 Jul 2026 Share Two @joyfill npm beta packages run an import-time implant that uses Tron, Aptos, and BSC to deliver a DEV#POPPER-linked Node.js RAT.
