Storia in 3 fonti

How a preinstall hook silently ran malware on npm install

On July 11 2026, npm install jscrambler ran a Rust infostealer before the package finished installing. The attack anatomy and what to audit in your pipeline.

Raccontata da

thehackernews.com

dev.to

bleepingcomputer.com

Confronto fonti

3 prospettive sulla stessa storia

AI · summaries

dev.toStai leggendo5 g fa

How a preinstall hook silently ran malware on npm install

On July 11 2026, npm install jscrambler ran a Rust infostealer before the package finished installing. The attack anatomy and what to audit in your pipeline.

originale

bleepingcomputer.com4 g fa

Hackers backdoor Jscrambler npm package with infostealer malware

The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm package that has been downloaded almost 1,500 times.

Leggi questa versione → originale

Timeline cronologica

sabato 11 luglio 2026·thehackernews.com
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
Malicious jscrambler 8.14.0 runs hidden binaries during npm install on Windows, macOS, and Linux, with no fix available as of July 11, 2026.
domenica 12 luglio 2026·dev.to
How a preinstall hook silently ran malware on npm install
On July 11 2026, npm install jscrambler ran a Rust infostealer before the package finished installing. The attack anatomy and what to audit in your pipeline.

How a preinstall hook silently ran malware on npm install

Hackers backdoor Jscrambler npm package with infostealer malware

Timeline cronologica

Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

How a preinstall hook silently ran malware on npm install

Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

Hackers backdoor Jscrambler npm package with infostealer malware