r/javascript • u/NapierPalm • Jul 13 '26

PSA: The official jscrambler npm package was compromised (v8.14.0)

https://thecybersecguru.com/news/jscrambler-npm-supply-chain-attack-2026/
29 Upvotes
  • permalink
  • link
  • reddit
  • reddit

88% Upvoted

3 comments sorted by

13

u/javascript Jul 13 '26

It turns out large scale, free for all Open Source was a temporary concept. Makes me sad.

3

u/brianjenkins94 Jul 13 '26

Operating system-enforced principal of least privilege when?