Two Joyfill npm Packages Found Delivering DEV#POPPER Malware
Compromised joyfill npm Packages used blockchain payloads to deliver the DEV#POPPER RAT, putting Node.js development environments at risk.
Tag: node.js
Node.js Fixes Critical Flaws, Patches DoS Risk in Latest Security Update
Node.js resolves CVE-2026-21637 and other flaws, addressing DoS risks, HTTP errors, and permission bypass issues across versions 20.x–25.x.
CrowdStrike Among Those Hit in NPM Attack Campaign
More than 20 CrowdStrike NPM packages were among nearly 200 NPM packages hit by a sophisticated supply chain attack. The ...
Q1 2026 Threat Reports
❮
❯
