Storia in 4 fonti

Multiple Jscrambler Packages Impacted by Supply Chain Attack

Malicious Jscrambler NPM package versions distributed a cross-platform credential stealer in a new supply chain attack.

Raccontata da

Confronto fonti

4 prospettive sulla stessa storia

AI · summaries

securityweek.comStai leggendo23 g fa

Multiple Jscrambler Packages Impacted by Supply Chain Attack

Malicious Jscrambler NPM package versions distributed a cross-platform credential stealer in a new supply chain attack.

originale

bleepingcomputer.com24 g fa

Hackers backdoor Jscrambler npm package with infostealer malware

The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm package that has been downloaded almost 1,500 times.

Leggi questa versione → originale

Timeline cronologica

sabato 11 luglio 2026·thehackernews.com
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
Malicious jscrambler 8.14.0 runs hidden binaries during npm install on Windows, macOS, and Linux, with no fix available as of July 11, 2026.
domenica 12 luglio 2026·dev.to
How a preinstall hook silently ran malware on npm install
On July 11 2026, npm install jscrambler ran a Rust infostealer before the package finished installing. The attack anatomy and what to audit in your pipeline.

Multiple Jscrambler Packages Impacted by Supply Chain Attack

Hackers backdoor Jscrambler npm package with infostealer malware

Timeline cronologica

Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

How a preinstall hook silently ran malware on npm install

Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

How a preinstall hook silently ran malware on npm install

Hackers backdoor Jscrambler npm package with infostealer malware

Multiple Jscrambler Packages Impacted by Supply Chain Attack