securityBACKGROUND
Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js
BACKGROUND
1 SIGNALFIRST DETECTED 29 July 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
29 Jul
Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js
REPORT · WHEN · The Hacker News
Other feeds and industry voices
19 May
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv ecosystem as part of
REPORT · HOW · The Hacker NewsOPEN STORY
3 Aug
18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part
REPORT · WHAT · The Hacker NewsOPEN STORY
31 Mar
Axios Compromised on NPM – Malicious Versions Drop Remote Access Trojan
<a href="https://news.ycombinator.com/item?id=47582220">Comments</a>
REPORT · WHAT · Hacker News Best (RSS)OPEN STORY
Sources
The Hacker News
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →