Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

Version 8.14.0 of the jscrambler npm package shipped with a malicious preinstall hook that silently drops and runs a native infostealer during installation, one build each for Windows, macOS, and Linux.

Published on July 11, 2026, it needs no import and no CLI call. Installing 8.14.0 is enough to run it.

Socket flagged the release six minutes after it was

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

A new Android malware from Google

A new Android malware from Google Source: Hacker News

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 03.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 209 requests (recent log) 216.73.216.125 — 66 requests (recent log) 216.244.66.232 — 57 requests (recent

Read More

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign that involves the use of a malicious program

Read More