cognitive cybersecurity intelligence
Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a remote access trojan (RAT) associated with the DEV#POPPER malware family.
The list of affected packages is as follows –
@joyfill/layouts@0.1.2-2773.beta.0
@joyfill/components@4.0.0-rc24-2773-beta.4
The two packages “contain an import-time JavaScript implant that resolves encrypted code
Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.
What You Should Know A joint report by the Urban Institute and Robert Wood Johnson Foundation analyzes five major federal policy shifts threatening hospital financial
Lazarus expands Korea cyberattacks via phishing and watering hole hacks – CHOSUNBIZ Chosunbiz
North Korean-linked hackers are turning trusted npm packages into an entry point for widespread software supply-chain attacks. By compromising the accounts of legitimate package maintainers,
Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the
