The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm package that has been downloaded almost 1,500 times. [...]
Hackers backdoor Jscrambler npm package with infostealer malware
Summary + source link. No paywalls, no tracking.