Research reports
1,224 reports from 387 publishers45 added in the past week
1 report, newest added first
Added Fri 31 Jul
Joyfill npm Packages Compromised with Blockchain C2 Loader
Two beta versions published to the @joyfill npm scope on July 28, 2026 carried the same blockchain C2 loader documented in the astro.config.mjs attack. The compromised packages are @joyfill/layouts@0.1.2-2773.beta.0 and…
MalwareSupply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.