Joyfill npm Packages Compromised with Blockchain C2 Loader

Two Joyfill npm packages were compromised with a sophisticated, multi-stage malware loader that leverages blockchain transactions for command-and-control, enabling stealthy remote access and persistence via obfuscated payloads delivered entirely through legitimate public blockchain APIs.