DevThe Hacker Newsabout 1 hour ago
Joyfill npm Packages Deliver RAT on Import
1 min read
Beta versions of two @joyfill npm packages deliver a remote access trojan when Node.js loads them. The malware uses Tron, Aptos, and BNB Smart Chain transactions to resolve encrypted code. The packages are linked to North Korean threat actors.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
