MAL-2026-10673 Malicious code in gulp-jscrambler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b1b47b7f27eee6dee1bdd61d3744f11cf323adb9d3d677f13abec5e911007f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10674 Malicious code in jscrambler-metro-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fcceac2cb214654a8eebc7fbbf7d72274679af60e874e513c639f8abc6bdd4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

The jscrambler npm package was compromised, and simply installing its 8.14.0 release runs an infostealer on your machine. Published on July 11, 2026, the malicious version carries a preinstall hook that drops and executes a native binary, one build each for Windows, macOS, and Linux. Socket flagg...

MAL-2026-10187 Malicious code in jscrambler (npm)

Supply-chain compromise of the official jscrambler npm client, a legitimate JavaScript obfuscation tool with roughly 60K downloads per month. Version 8.14.0 was published from the legitimate publisher account jscrambler / [email protected], which points to an account or CI compromise rather tha...

Malicious code in jscrambler (npm)

Supply-chain compromise of the official jscrambler npm client, a legitimate JavaScript obfuscation tool with roughly 60K downloads per month. Version 8.14.0 was published from the legitimate publisher account jscrambler / [email protected], which points to an account or CI compromise rather tha...

MAL-2023-1502 Malicious code in jscrambler-permission-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 131a72d7a509dfbdfaa80048c9ac64559b4f8ec25798e555ea15688529491856 The OpenSSF Package Analysis project identified 'jscrambler-permission-utils' @ 6.6.6 npm as malicious. It is considered malicious because: - Th...

Malicious code in jscrambler-permission-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 131a72d7a509dfbdfaa80048c9ac64559b4f8ec25798e555ea15688529491856 The OpenSSF Package Analysis project identified 'jscrambler-permission-utils' @ 6.6.6 npm as malicious. It is considered malicious because: - Th...

MAL-2023-1499 Malicious code in jscrambler-dashboard-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a31aff9b73f313c920ebbb6370e3afc3139565f139114ab47ef7859e989f418 The OpenSSF Package Analysis project identified 'jscrambler-dashboard-components' @ 9.9.9 npm as malicious. It is considered malicious because: ...

Malicious code in jscrambler-cookies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2030b82f282ea6a8622a42dfe9e944d63773863556536a6b8413c1141237854b The OpenSSF Package Analysis project identified 'jscrambler-cookies' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...