166[.]88[.]134[.]62

Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain

Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan

Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan

Joyfill npm Packages Compromised with Blockchain C2 Loader - Real-time Open Source Software Supply Chain Security