npm scope
@joyfill
LPM Firewall blocks 2 packages in the @joyfill npm scope.
Jul 29, 2026
@joyfill/components@4.0.0-rc24-2773-beta.4
MalwareOpenSSF Malicious Packages via OSV confirms @joyfill/components@4.0.0-rc24-2773-beta.4 as malicious (MAL-2026-11160): Malicious code in @joyfill/components (npm)
Jul 29, 2026
@joyfill/layouts@0.1.2-2773.beta.0
MalwareOpenSSF Malicious Packages via OSV confirms @joyfill/layouts@0.1.2-2773.beta.0 as malicious (MAL-2026-11161): Malicious code in @joyfill/layouts (npm)
Each card opens the package page with its evidence and every recorded version.