> TritonInfoSec News
Home / Jul 14, 2026 / Story
0
#7 BleepingComputer general July 13, 2026 at 19:44 UTC

Hackers backdoor Jscrambler npm package with infostealer malware

By Bill Toulas

AI Summary

A threat actor published a malicious version of Jscrambler's npm package embedded with infostealer malware, which was downloaded approximately 1,500 times before detection — representing another supply chain compromise of a widely-used client-side web security tool. Developers and security teams using Jscrambler's npm package should audit their dependencies and check for indicators of compromise immediately.

Read full article → https://www.bleepingcomputer.com/news/security/hac…

Relevance score: 79.0/100

# More from July 14

  1. 1
    Europe strikes out against Russia’s Turla over espionage, ‘destructive attacks’ CyberScoop
  2. 2
    Russia's FSB blamed for Poland grid attack as UK and EU impose first joint cyber sanctions The Record
  3. 3
    US and allies warn of Russian critical infrastructure attacks BleepingComputer
  4. 4
    iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days The Hacker News
  5. 5
    Lessons Learned from CISA’s Recent GitHub Leak Krebs on Security
  6. 6
    Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns SecurityWeek
  7. 8
    EU sanctions Russian GRU military hackers over cyberattacks BleepingComputer
  8. 9
    New CrashStealer malware poses as Apple crash reporting tool BleepingComputer
  9. 10
    Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft The Hacker News