Malicious code in scdn-jquery (npm)

Version 0.1.6 contains an obfuscated loader in libs/18.2.0.js. When a website serves this file as a browser script, the injected code decodes and loads hxxps://oomcsn.cc/assets/js/m.js. That remote script loads a beacon and inserts an invisible iframe pointing to...

MAL-2026-18455 Malicious code in scdn-jquery (npm)

Version 0.1.6 contains an obfuscated loader in libs/18.2.0.js. When a website serves this file as a browser script, the injected code decodes and loads hxxps://oomcsn.cc/assets/js/m.js. That remote script loads a beacon and inserts an invisible iframe pointing to...

Malware in scdn-jquery

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in scdn-jquery (npm)

Version 0.1.6 contains an obfuscated loader in libs/18.2.0.js. When a website serves this file as a browser script, the injected code decodes and loads https://oomcsn.cc/assets/js/m.js. That remote script loads a beacon and inserts an invisible iframe pointing to...