Clipboard Data

Named by 2 kept items in this workspace.

Search every workspace for Clipboard Data. It matches the name as written, so it can find other things that share it.

The items that name it 2

Socket: Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
writeup2026-09-20
Final RAT reads clipboard data via PowerShell (Windows), pbpaste (macOS), and xclip/xsel (Linux).
Socket: Chrome and Firefox VPN Extensions Add Clipboard Stealers via Malicious Updates
writeup2026-06-30
Extensions read clipboard contents via navigator.clipboard.readText on a timer (every 500ms in Chrome, 1500ms in Firefox), deduplicating and chunking newly copied text.

All techniques in this workspace.