Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

Hijacked Joyfill npm Packages Deploy Worm-Like RAT and Steal Developer Credentials

Cybersecurity NewsJuly 29, 20265 min read

A fresh supply chain scare hit software teams after attackers slipped malware into trusted open source libraries. On July 28, 2026, malicious beta builds of two Joyfill packages appeared on the npm registry. The libraries, @joyfill/components and @joyfill/layouts, are used for forms and layout work in many web apps. Anyone who imported those beta builds […] The post Hijacked Joyfill npm Packages Deploy Worm-Like RAT and Steal Developer Credentials appeared first on Cyber Security News.

A fresh supply chain scare hit software teams after attackers slipped malware into trusted open source libraries. On July 28, 2026, malicious beta builds of two Joyfill packages appeared on the npm registry. The libraries, @joyfill/components and @joyfill/layouts, are used for forms and layout work in many web apps. Anyone who imported those beta builds could trigger hidden code without a classic install script. The malware opens a remote control channel and later tries to steal developer secrets from the workstation.…

Excerpt shown under the publisher's RSS terms · 81 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article