Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
2026-07-11T19:24:11Z•85dc6e11e743d4a6e0137ecb50f3e9321116e5d3b998ecf09eabe5a1c78885be
cryptocurrency-theftdenial-of-servicefirmwaregigaWipergithub-compromiseinfostealerjscramblernpmnpm-12physical-attackransomwaresupply-chaintangemu-bootwallet-stealerxquicxsszimbra
What happened
Large set of active, high-risk security incidents across software supply chains, enterprise services, firmware, and crypto ecosystems. Key stories: a compromised jscrambler npm release (v8.14.0) included a malicious preinstall hook that drops a Rust-based infostealer and runs on install; Injective Labs' GitHub repo was abused to publish an npm package that steals wallet private keys/mnemonics; npm 12 is changing defaults to disable install scripts to mitigate such risks. Other high-impact items: a critical stored XSS in Zimbra Classic Web Client (arbitrary script execution in user sessions), a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 85dc6e11e743d4a6e0137ecb50f3e9321116e5d3b998ecf09eabe5a1c78885be
- Enrichment time
- 2026-07-11T19:24:11Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.