@joyfill/components

Named by 2 kept items in this workspace.

Search every workspace for @joyfill/components. It matches the name as written, so it can find other things that share it.

The items that name it 2

Socket: Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
writeup2026-09-20
npm package supplying React UI components for Joyfill; contains the same malicious injection in dist/index.js, dist/index.esm.js, and dist/joyfill.min.js, though its Rollup bundle limits execution.
Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan
writeup2026-07-30
npm package; legitimate project hijacked, malicious code only in published tarballs

All technologies in this workspace.