Development by UK firm Nscale heralded by ministers as largest of its kind in country loses anchor tenant

The development of a huge AI datacentre hailed by the UK government has received a fresh setback after Microsoft pulled out of the project over concerns about power supplies.

The development by the British company Nscale, heralded by ministers as the country’s largest AI datacentre when it was announced in 2025, was planned to open at Loughton in Essex next year.

Continue reading...

© Photograph: Nscale

© Photograph: Nscale

© Photograph: Nscale

A modern-day prospector promised rural Imperial thousands of jobs and millions in tax revenue – but his plan has set off a firestorm of resistance

Sebastian Rucci zoomed in on a map in late 2024, looking closely at a large block of brown earth. The barren plot sandwiched between sprawling alfalfa fields and sleepy desert suburbs was exactly what he’d been searching for – the perfect place to realize his dream of building the largest artificial intelligence datacenter in California.

The dusty expanse wasn’t an obvious location. It was in the Sonoran desert, just north of the Mexican border, where temperatures regularly rose past 100F (37.8C). Water was scarce in the once-booming agricultural area, which gets its supply from the beleaguered Colorado River. And then, there was the city of Imperial – population 22,000 – to win over. As controversial datacenter projects have sprung up across the US, residents were naturally skeptical of a new, energy-guzzling neighbor.

Continue reading...

© Photograph: Gina Ferazzi/Los Angeles Times/Getty Images

© Photograph: Gina Ferazzi/Los Angeles Times/Getty Images

© Photograph: Gina Ferazzi/Los Angeles Times/Getty Images

Grid operator paying large sums to switch off windfarms in areas of excess electricity generation while turning on gas plants elsewhere

The cost of balancing Great Britain’s power grid has soared to near-record highs of almost £50m a day after windfarms were turned off because of bottlenecks in transmitting power around the country.

The grid operator paid £47.9m on Wednesday to turn windfarms off in areas with an oversupply of electricity and turn gas plants on in areas where supplies were tight.

Continue reading...

© Photograph: Robin Weaver/Alamy

© Photograph: Robin Weaver/Alamy

© Photograph: Robin Weaver/Alamy

Engineer Tristan Ralph describes task of maintaining and running Bristol structure without public money

The job does not give the holder age-old perks such as the right to drive sheep across the great structure, but the title “bridge master” does have a certain ring to it.

“I don’t tend to say I’m the bridge master when I’m at a party,” said Tristan Ralph, the current holder of the title. “But people do seem to know and bring it up. It’s a job less ordinary, isn’t it? It’s a Victorian sounding title and people are really, really interested.”

Continue reading...

© Photograph: Sam Frost/The Guardian

© Photograph: Sam Frost/The Guardian

© Photograph: Sam Frost/The Guardian

It won’t promote growth, will take decades and will swallow up billions of taxpayers’ money. The only winner will be the airport’s owners

Infrastructure sends politicians berserk. Propose more money for the health service or reopening youth clubs and frowns break out all round. Can we afford it? But shout infrastructure and cheers go up. The word suggests glamour, chest-beating and “growth”. Reason flies out of the window.

The saga of Heathrow’s third runway beggars belief. A foreign-owned private company wants to make more money out of its cramped west London investment. The airlines are sceptical and passengers will have to pay surcharges higher than any in Europe. Meanwhile fields lie empty round its rival, Gatwick, and capacity at London’s third airport, Stansted, is underused.

Simon Jenkins is a Guardian columnist

Continue reading...

© Photograph: Peter Macdiarmid/Getty Images

© Photograph: Peter Macdiarmid/Getty Images

© Photograph: Peter Macdiarmid/Getty Images

The U.S. Justice Department and FBI have seized two hacking tools, Microscan and FishHub, that court documents say were operated and used by Flax Typhoon actors working for a China-based company. According to the government, the tools were used to scan, and in some cases hack, U.S. and foreign critical infrastructure systems and other networks. The court-authorized seizures were announced alongside court documents unsealed in the Western District of Pennsylvania. Prosecutors allege the actors worked for Integrity Technology Group (Integrity Tech), a company based in the People's Republic of China (PRC) that holds contracts with the PRC government. The action is the latest step by U.S. authorities against China state-sponsored hackers.

How Flax Typhoon Actors Used Microscan for Vulnerability Scanning

According to court documents, Integrity Tech built and used a botnet of internet-of-things devices infected with a variant of Mirai malware. The botnet supported the company's vulnerability scanning through Microscan, a tool Integrity Tech developed to perform reconnaissance on victim networks and identify weaknesses its clients would later exploit. Targets of Microscan scanning included a U.S. power company based in South Carolina, a multinational non-governmental organization, airports in Japan and Poland, Taiwanese critical infrastructure companies in the natural gas and power sectors, and two Taiwanese universities. Integrity Tech accessed Microscan through c0cc[.]cc, one of the seized domains.

FishHub and the Flax Typhoon Spear Phishing Operation

The second tool, FishHub, allegedly helped compromise computer networks through spear phishing. After gaining initial access, FishHub downloaded additional malware to the victim network. That malware either gave Integrity Tech's clients unauthorized remote access or searched for specific files and sent them to servers controlled by Integrity Tech. Confirmed FishHub victims included about 20 Taiwanese universities. Five seized domains helped deliver the malware: 98aicai[.]com, 98aicode[.]com, outlook3650[.]com, youtubecard[.]com, and linkedinns[.]net.

What Officials Said About Flax Typhoon

Assistant Attorney General for National Security John A. Eisenberg said the United States "will not allow China or its proxies to operate against United States interests with impunity in cyberspace." He added that the National Security Division would continue working to disrupt the Flax Typhoon threats and dismantle the infrastructure sustaining them. Assistant Director Brett Leatherman of the FBI's Cyber Division said, "The PRC relies on contractor and enabling companies to expand the reach and scale of its malicious cyber activity. By exposing and disrupting these enablers, we make it harder for the PRC to target American networks and infrastructure." U.S. Attorney Troy Rivetti for the Western District of Pennsylvania described the seizures as the second disruption of Integrity Tech's operations in as many years. Special Agent in Charge Mark Remily of the FBI San Diego Field Office said the action reflects the FBI's commitment to disrupting PRC state-sponsored cyber actors who threaten critical infrastructure and national security.

Second Disruption of Flax Typhoon Infrastructure

This is the Justice Department's second public technical disruption of Integrity Tech's hacking infrastructure. In September 2024, the department announced the court-authorized disruption of Integrity Tech's Mirai botnet, which included more than 200,000 consumer devices in the United States and worldwide. Alongside the latest seizures, the FBI and other U.S. and foreign partner agencies published a cybersecurity advisory listing indicators of compromise tied to Integrity Tech intrusion activity. The advisory is intended to help network defenders identify and respond to the group's malicious activity. The FBI San Diego and Baltimore Field Offices are investigating the case in coordination with the FBI's Cyber Division. Assistant U.S. Attorney Brendan McKenna for the Western District of Pennsylvania and Trial Attorney Jacques Singer-Emery of the National Security Division's National Security Cyber Section are prosecuting the case. Assistant U.S. Attorney Thomas Sullivan for the District of Maryland and the National Police Agency of Japan provided substantial assistance.

"Billions of phones run on code looked after by a handful of people.We counted them from the code itself." - The people holding up the internet.

Pennon slashes dividend and launches £550m cash call ‘to drive improved outcomes for customers and communities’

• Burnham, take note: water shareholders have their uses

The owner of embattled South West Water has slashed its dividend and launched a cash call to investors as it attempts to fund infrastructure investment, days after it was hit by a record £7.9m fine for hundreds of sewage spills.

London-listed Pennon said on Wednesday it would tap investors for £550m, as part of a £1bn investment “to drive improved outcomes for customers and communities”.

Continue reading...

© Photograph: Graham Hunt/Alamy

© Photograph: Graham Hunt/Alamy

© Photograph: Graham Hunt/Alamy

In the second article in a series on the Polish economy, we look at how the country is forging closer ties with its neighbours

Two miles off the coast of Gdańsk, the white steel piles of Poland’s first offshore gas terminal rise from the slate-grey Baltic. Installed at a height eight metres above the waves, the floating cranes and construction vessels here are on the frontline of Europe’s push for energy security.

Since the taps were turned off on Russian gas after Vladimir Putin’s invasion of Ukraine four years ago, Poland has turned to the global energy market for supplies. But while conditions are far from ideal as the Middle East war drives oil and gas prices to stratospheric levels, strengthening the diversity of the country’s energy mix remains a top priority for Poland, its Baltic neighbours, and the EU at large.

Continue reading...

© Photograph: Anna Liminowicz/The Guardian

© Photograph: Anna Liminowicz/The Guardian

© Photograph: Anna Liminowicz/The Guardian

OpenAI rogue AI agents carried out unauthorized activity across Wikimedia platforms, including wiki edits, attempts to use a public note-taking service as a proxy and millions of automated requests, according to an investigation by the Wikimedia Foundation. The Foundation said it identified activity it believes was conducted by agents operated by OpenAI after investigating reports that so-called “rogue” AI agents had attempted to break into websites and online services. Wikimedia said it found no evidence that its systems or data were compromised or that its platforms were used to coordinate agents. However, the investigation identified several forms of unauthorized activity involving AI agents.

OpenAI Rogue AI Agents Made Unauthorized Wiki Edits

Wikimedia identified edits that it believes came from OpenAI rogue AI agents. Almost all of the edits were made in wiki sandbox areas and were not published on pages visible to general readers. The activity also included several edits involving the configuration of a citation tool. Wikimedia said these edits appeared potentially malicious and may have been intended to misuse the tool as a proxy for fetching data from remote services. Wikipedia allows bots to make edits when they are disclosed and approved by community editors. Wikimedia said no such approvals were sought in these incidents. The Foundation said its investigation did not find evidence that the edits resulted in a compromise of Wikimedia systems or data.

Etherpad Attempts and Agent Activity

Wikimedia also found unsuccessful attempts involving Etherpad, a public note-taking tool operated by the Foundation as a community service. According to Wikimedia, agents believed to be operated by OpenAI attempted to use Etherpad to fetch data from other websites as a proxy. Other agents also appeared to use the service to take notes about their tasks, although Wikimedia said this did not appear to develop into coordination. The findings come amid reports of AI agents using public websites and online services in unintended ways. Wikimedia said OpenAI agents have previously been observed using public platforms as communication channels. In one previously reported incident, agents repurposed a wiki website as a message board to exchange information about how to circumvent evaluation tasks. Similar behavior was reported in the Hugging Face incident, where agents used an OpenAI file-sharing service to coordinate activity during a cybersecurity assessment.

Millions of Requests Hit Wikimedia Infrastructure

The investigation also found significant automated traffic associated with agents believed to be operated by OpenAI. Wikimedia said the agents made millions of automated requests to its public APIs, crawled millions of pages, primarily from Wikidata and Wikimedia Commons, and generated hundreds of thousands of queries to the Wikidata Query Service. The Foundation said the traffic may have contributed to a partial outage affecting the Wikidata Query Service in May. The scale of the activity adds to existing concerns over automated traffic on Wikimedia projects. The Foundation previously reported that bandwidth usage had increased by 50% because of increased bot activity since 2024, while 65% of the most resource-consuming traffic on its projects was coming from bots.

OpenAI Calls Wiki Incident a Misalignment Issue

OpenAI confirmed the incident after Reuters first reported it. The company described the “wiki incident” as an example of misalignment, referring to situations where an AI system does not follow human intentions. OpenAI also argued that the AI industry does not have a common standard for disclosing incidents involving models behaving in unintended ways. The company denied claims that its lawyers had pressured employees to keep the incident quiet. Wikimedia said the incident highlights the growing challenges created by AI agents operating across open online services. The Foundation said it found no evidence that its platforms were used for agent coordination, but warned that the activity placed additional pressure on infrastructure maintained for public use. OpenAI CEO Sam Altman also said in a Monday interview with Politico that society should accept some negative consequences in exchange for the benefits of AI technology. [caption id="attachment_114596" align="aligncenter" width="600"] Image Source: X[/caption]

The Wikimedia investigation adds to recent reports of AI agents interacting with public websites and online services in unintended ways. The Foundation said such activity can create challenges for website operators, particularly when agents generate large volumes of automated traffic or attempt to use public services for purposes beyond their intended function.

St. Lucie County in Florida discovered (alt link) a dozen Flock cameras whose ownership it can’t identify, and that the county government had not permitted.

I am reminded of the decade-old story of StingRay cell phone surveillance devices in Washington, DC, whose operators were also unknown.

My guess is that in the StingRay case, the devices were operated by foreign actors. This Flock case is more likely some local government entity that didn’t bother getting approval. Were I a foreign actor, I would rather hack the existing Flock network—like Israel did with Tehran’s surveillance cameras—than risk installing my own.

Regardless, once we normalize a surveillance infrastructure, both friends and foes will take advantage of it.

The U.S. State Department has posted a $10 million reward for Amir Yaryab, a senior Iranian official accused of leading the Islamic Revolutionary Guard Corps Cyber-Electronic Command (IRGC-CEC) Cyber Operations Command and directing multiple hacking groups targeting critical infrastructure across the United States, Europe and the Middle East. According to the Rewards for Justice program, Yaryab allegedly oversees cyber operations conducted by IRGC-CEC-affiliated groups including CyberAv3ngers, Dadeh Afzar Arman (DAA) and Mehrsam Andisheh Saz Nik (MASN). U.S. officials accuse these groups of using malware and conducting cyber and cyber-enabled information operations against civilian infrastructure worldwide.

$10 Million Reward for Amir Yaryab

The $10 million reward for Amir Yaryab seeks information leading to his identification or location. The offer applies to individuals acting at the direction or under the control of a foreign government who participate in malicious cyber activities against U.S. critical infrastructure in violation of the Computer Fraud and Abuse Act. [caption id="attachment_113961" align="aligncenter" width="600"] Image Source: https://rewardsforjustice.net/[/caption] Yaryab is also accused of directing Shahid Hemmat and Shahid Shushtari, two groups linked to cyberattacks against U.S. organizations. The sectors allegedly targeted include defense, news, shipping, travel, energy, financial services and telecommunications. The six Iranian officials named in the advisory are linked to Iran's Islamic Revolutionary Guard Corps and its Cyber-Electronic Command.

Iranian Cyberattacks Target PLCs

The allegations also involve attacks against programmable logic controllers (PLCs), highlighting concerns around Iranian cyberattacks targeting industrial systems rather than focusing only on data theft. U.S. officials said Iranian-linked hackers compromised industrial control systems, specifically targeting the Vision series of PLCs manufactured by Israel-based Unitronics. These devices are used across water and wastewater, energy, food and beverage, manufacturing and healthcare sectors. The attackers exploited default credentials on the devices and left anti-Israel messages. Some of the compromises reportedly rendered the PLCs inoperative. The CyberAv3ngers group, which is linked to the IRGC-CEC, claimed responsibility for attacks against Unitronics Vision PLCs in October 2023. Beginning in November 2023, the group compromised default credentials in PLCs across the United States and left messages on the devices' digital screens.

CyberAv3ngers Attacks Critical Infrastructure

CyberAv3ngers has also claimed responsibility for attacks affecting other infrastructure. In October 2023, the group claimed it had breached ORPAK Systems, a provider of gas station solutions in Israel. The group said it had obtained the company's database and intended to publish it through its Telegram channel. The attack was reported to have disconnected 200 gasoline pumps from the system in the occupied Palestinian territories. In December 2023, CyberAv3ngers also claimed to possess and sell 1TB of data allegedly linked to Israel's electricity infrastructure. The group advertised the dataset for 5 Bitcoin, with an initial 100GB portion also offered at the same price.

U.S. Agencies Warn of PLC Cyberattacks

Concerns over critical infrastructure attacks involving PLCs continued into 2026. A joint advisory issued on April 7 by the FBI, CISA, NSA and other agencies warned that Iran-linked threat actors were actively exploiting internet-facing PLCs. The advisory said several organizations had experienced operational disruptions and financial losses after attackers interfered with industrial processes. The developments come amid broader U.S. actions against Iranian-linked cyber activity. The Justice Department accused Iran-connected hackers of breaching employee email accounts associated with the Department of Labor, the Federal Energy Regulatory Commission and multiple United Nations organizations. The Treasury Department also sanctioned Iranian nationals over cyberattacks targeting critical infrastructure. The State Department's reward offer places Amir Yaryab and the alleged activities of IRGC-CEC-linked groups at the center of the U.S. effort to identify individuals responsible for malicious cyber activity targeting critical infrastructure.

The CISA and FBI, along with cybersecurity agencies from Australia, Canada, New Zealand and the U.K., have released new guidance on outage communications for service providers dealing with major IT and OT outages. The guide calls for prompt, factual and audience-specific communication during disruptions caused by malicious cyber activity or non-malicious events.

Titled “Communicating Under Pressure: Best Practices for Service Providers,” the guidance says effective communication is critical to limiting operational impact when IT and OT outages affect customers, network defenders, critical infrastructure owners and operators, and the public. It recommends that organizations clearly communicate what is known, what remains unknown and what is still under investigation, while providing frequent updates as circumstances change.

Outage Communications Should Start With Facts

The agencies recommend that service providers establish an outage communications plan before an incident occurs. The plan should define incident thresholds, escalation paths, target audiences and procedures for status pages, customer and partner notices, and regulatory communications. Organizations are also advised to establish cross-functional incident teams involving engineering and operations, communications, legal, risk and compliance, and customer support.

The guidance calls for clearly defined roles, including an incident lead, communications lead and spokesperson. It also recommends parallel workstreams so technical teams can focus on diagnosing and remediating the root cause while communications teams manage external messaging and leadership handles strategy and regulatory requirements.

For organizations responding to cyber incidents, the guidance places particular emphasis on balancing transparency with operational security. If malicious activity is suspected or confirmed, external communications should not compromise investigations, containment efforts or other response activities. Organizations are also advised against making premature conclusions when the root cause remains under investigation.

Service Providers Urged to Tailor Messages

The guidance recommends segmenting communications for technical teams, executives and the public. Audiences can include enterprise IT teams and security operations centers, employees and customers, government partners and regulators, critical infrastructure owners and operators, as well as the media and general public.

During an outage, organizations should lead with a concise summary covering affected systems, user impact, scope and the known cause without speculation. The agencies also advise against vague descriptions such as “service degradation” and recommend messaging that can be understood quickly during high-pressure situations.

Transparency is another central principle. Service providers are advised to state what they know and do not know, use a single source of truth such as a status page, and focus communications on actionable guidance rather than reputation management. Customers should be told what actions they need to take or clearly informed when no action is required.

The guidance also calls for continuous, time-stamped updates that show the incident timeline, actions taken, and recovery milestones. Organizations should maintain a single status page and align external messaging with legal, contractual and sector-specific reporting obligations.

Agencies ultimately frame effective outage communications around five principles: immediate acknowledgement, technical and actionable information, transparency, accountability, and continuous updates. For service providers, the guidance positions communication as an important part of incident response, alongside technical remediation and recovery.

It sure seems like it.

The stores confirmed to be affected include Fort Irwin, Calif.; F.E. Warren Air Force Base, Wyo.; Fort Huachuca, Ariz.; Naval Station Newport, R.I.; Columbus Air Force Base, Miss.; and Travis Air Force Base, Calif., according to announcements made online by each installation.

Naval Air Station Lemoore, Calif., also experienced an outage, according to M. Elizabeth, writer of the Substack newsletter Signal and Silence.

Each service declined to answer questions about how many bases are affected by the outages, referring all questions to the Defense Department. Pentagon officials did not respond to questions.

However, a defense official said the department is aware of a “possible refrigeration disruption at some Defense Commissary Agency commissaries.” The official was not authorized to comment publicly and spoke on the condition of anonymity.

All speculation at this point, but it’s hard to come up with another explanation for the coincidence.

Amarbir Singh, Senior Director – AI & Cloud Solutions, AHEAD Building a secure cloud foundation for AI has become a top priority as enterprises move quickly to put AI at the center of how they operate. However, the rush to adopt AI is also reshaping the security agenda. The World Economic Forum’s Global Cybersecurity Outlook 2026 finds that 94 percent of organizations now see AI as the most significant driver of change in cybersecurity this year, while the share with processes in place to assess AI tools before deployment has risen from 37 percent to 64 percent. That is an encouraging sign. It suggests enterprises are beginning to match AI ambition with stronger assurance. The challenge now is to build the secure, scalable cloud foundation that allows this progress to continue without creating more risk and complexity.

Why a Secure Cloud Foundation for AI Matters More Than Ever

Too often, enterprises make that job harder for themselves. Attackers tend to work with discipline. They standardize, repeat and refine. Enterprises often do the opposite. They add tools, customize around every edge case and accumulate exceptions until their environments become harder to understand and harder to defend. In that kind of estate, every new control can create another blind spot. Building a secure cloud foundation for AI is not just about adding capability. It is about reducing unnecessary complexity, improving visibility and making deliberate choices about what truly needs to be there. That matters because many organizations are now stuck between urgency and overload. The market moves fast, threat categories keep shifting and new frameworks and vendors appear almost every week. In that environment, hesitation can feel prudent, but it often becomes the bigger risk. Security and cloud leaders do not need perfect certainty before they move. They need a clear direction, a practical operating model and the discipline to iterate. The era of fixed multi-year plans is giving way to shorter roadmaps that can adapt as the threat landscape changes. Progress now matters more than perfection.

Moving Beyond Traditional Security Operating Models

This is where traditional execution models begin to fall short. Annual policy reviews, slow approval chains and static response plans were built for a slower world. They are poorly suited to a landscape where AI adoption, cyber risk and business priorities can all shift within a quarter. Security cannot function as a document that gets reviewed once a year. It has to function as a living operating model across the business. That means decisions happen faster, ownership is clearer and incident response is tested often enough that teams know what to do when pressure is real. The shift that matters most is a shift from tools to outcomes. Security maturity is still too often measured by how much technology has been bought rather than what risk has actually been reduced. But tools are inputs, not outcomes. What matters is faster patching, lower exposure, stronger identity controls, clearer accountability and a more resilient business. Vulnerability management should reduce the attack surface. Identity controls should let a distributed workforce operate safely and consistently. Resilience architecture should protect the services the business truly depends on. If a control does not support a meaningful outcome, its value should be questioned. The same logic applies to cloud foundations in the AI era. Resilience should be designed around actual business need, not assumed as an abstract virtue. Some applications justify multi-region or even multi-provider architectures. Others do not. Building beyond the point of business need adds cost and complexity without adding meaningful protection. The stronger approach is to calibrate resilience to risk, not to fashion. Identity is equally central. A zero trust model anchored in strong identity, multifactor authentication and disciplined access controls gives enterprises a consistent way to secure users, workloads and data across environments. At the same time, visibility and observability have to improve. Enterprises need to know where data is moving, where AI is being used and where new dependencies are emerging. Without that visibility, governance becomes reactive. With it, governance becomes an enabler of safe adoption rather than a brake on progress.

Using AI to Improve Security Without Replacing Human Judgment

AI itself should be part of this foundation, but not as a substitute for judgement. Used well, it can improve efficiency, accelerate detection and help teams manage growing operational demands. But people still need to stay firmly in the loop. The goal is not automation for its own sake. The goal is better decisions, faster response and stronger control in an environment that is only getting more dynamic. The enterprises that scale AI securely will not be the ones that chase every new tool or wait for the market to settle. They will be the ones that simplify where they can, standardize where it matters and build cloud foundations that are governed, observable and designed around business outcomes. In the AI era, trust will depend less on how loudly an organization talks about innovation and more on whether it has built the foundations to sustain it securely at scale.

Attribution is preliminary, and so far it seems no real damage.

And it seems like this is a campaign that has targeted at least seven states. And, because this is where the US is right now, Trump doesn’t believe it’s Iran and thinks Minnesota…I guess…hacked itself.

“I think I blame it on Minnesota because they’re grossly incompetent,” Trump said. “I would blame it on Minnesota and the governor, the corrupt governor of Minnesota. They like to say, ‘Oh, it’s Iran.’ Iran should be so lucky. Iran’s got bigger problems than worrying about Minnesota.”

No word on whether he believes the other six states have hacked themselves as well.

Slashdot thread.

Two beta releases of joyfill npm Packages have been found distributing a malware implant capable of delivering the DEV#POPPER remote access trojan (RAT) . The compromised Node.js packages use an import-time loader that retrieves encrypted payloads through blockchain transactions instead of traditional command-and-control infrastructure.  The affected releases are @joyfill/layouts@0.1.2-2773.beta.0 and @joyfill/components@4.0.0-rc24-2773-beta.4. Joyfill develops software development kits for embedding forms, documents, and PDFs into web and mobile applications. While both packages collectively receive around 16,000 weekly npm downloads, researchers noted that the figure overlaps because @joyfill/components depends on @joyfill/layouts, and it does not represent installations of the compromised beta versions. 

Joyfill npm Packages Deliver DEV#POPPER RAT Malware

Unlike conventional npm attacks that rely on lifecycle scripts, the malicious code executes when the Node.js module is imported. This means the implant activates during package loading, making npm install --ignore-scripts ineffective once the affected module is used.  Socket's analysis identified code patterns matching the PolinRider loader family and linked the final payload to the DEV#POPPER malware family. Researchers emphasized that these findings are based on technical similarities and published research rather than attributing the compromise to a specific threat actor.  According to the report, the compromised joyfill npm Packages are capable of arbitrary code execution across development environments, CI runners, test systems, server-side rendering environments, and production builds. The recovered 77 KB Node.js RAT can collect host information, establish a Socket.IO remote-control channel, execute JavaScript or shell commands, upload files, access clipboard data, and modify developer-related files to maintain persistence. 

Blockchain Infrastructure Powers Multi-Stage Malware 

Investigators found that both malicious releases were published on 28 July 2026 using Node.js 18.20.0 and npm 10.5.0, with the shared prerelease build marker 2773. Source maps indicate the malicious code was present during the build process, although the report states this does not determine whether attackers compromised a developer workstation, source repository, CI pipeline or publishing credentials.  The malware uses a multi-stage delivery process, retrieving encrypted payloads through Tron, Aptos and BNB Smart Chain transactions. Researchers warned that this blockchain-based approach enables attackers to update payloads without publishing new npm releases.  Additional payloads downloaded by the malware included a detached Node.js bootstrap and a Python credential stealer believed, with medium confidence, to be a variant of OmniStealer. 

Recommendations for Developers and Security Teams 

The report also noted significant similarities to an incident analysed by eSentire earlier in 2026, in which DEV#POPPER was deployed via a weaponised GitHub repository. However, researchers believe the current campaign most likely resulted from a maintainer compromise rather than a malicious project clone.  Security teams are advised to remove both affected joyfill npm Packages, replace them with verified versions @joyfill/layouts@0.1.1 and @joyfill/components@4.0.0-rc24, isolate any systems that imported the malicious releases, and rotate credentials from unaffected machines. The researchers also recommend monitoring Node.js environments for unusual blockchain RPC traffic and reviewing systems for persistence mechanisms that may remain even after the packages are removed. 

Many manufacturing plants depend on OT systems that stay in service for many years. That long run can hide significant cybersecurity risks.