securityBACKGROUND
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
BACKGROUND
2 SIGNALSFIRST DETECTED 11 July 2026
Narrative synthesis pending — 2 signals collected.
How the story developed
13 Jul
Hackers backdoor Jscrambler npm package with infostealer malware
REPORT · WHAT · BleepingComputer
11 Jul
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
REPORT · WHAT · The Hacker News
Other feeds and industry voices
19 May
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv ecosystem as part of
REPORT · HOW · The Hacker NewsOPEN STORY
29 Jun
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised
REPORT · WHO · The Hacker NewsOPEN STORY
15 May
Popular node-ipc npm package compromised to steal credentials
Hackers have injected credential-stealing malware into newly published versions of node-ipc, a popular inter-process communication package, in a new supply chain attack targeting
REPORT · WHAT · BleepingComputerOPEN STORY
Sources
BleepingComputerThe Hacker News
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →