The Hacker Newsinfo@thehackernews.com (The Hacker News)
Compromised jscrambler npm package spreads Rust infostealer
A recent release of the jscrambler 8.14.0 npm package was compromised, resulting in the distribution of Rust-infostealer malware during installation. This incident highlights vulnerabilities in the software supply chain and emphasizes the importance of security measures to prevent malware distribution. It showcases the increasing risks associated with third-party software, urging developers and organizations to strengthen their cybersecurity practices.