Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install 2026-07-11 at 20:59 By Version 8.14.0 of the jscrambler npm package shipped with a malicious preinstall hook that silently drops and runs a native infostealer during installation, one build each for Windows, macOS, and Linux. Published on July 11, 2026, it needs no import and no CLI call. Installing […]
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install Read More »