Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

Malicious jscrambler 8.14.0 runs hidden binaries during npm install on Windows, macOS, and Linux, with no fix available as of July 11, 2026.

Raccontata dathehackernews.com