MalwareBleeping Computer
6.0 — HIGH
Hackers backdoor Jscrambler npm package with infostealer malware
The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm package that has been downloaded almost 1,500 times. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A malicious version of the Jscrambler npm package was published with infostealer malware, compromising almost 1,500 downloads in a two-hour window, targeting sensitive data from various applications and services.
⚙️Technical Details
💥Impact Assessment
Severity: high
Who Is at Risk
developers who used the malicious npm packages, including those using Jscrambler's Code Integrity product
🛡️Recommended Actions
1Developers should treat their environments as compromised and rotate all secrets.
2Customers should ensure they are using the latest version of the Jscrambler product.
3Developers should restore from safe backups to prevent potential data loss.
📦Affected Products
Npm Package Name: jscrambler
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.