Hackers backdoor Jscrambler npm package with infostealer malware

A threat actor published malicious versions of the Jscrambler npm package (releases 8.14, 8.16, 8.17, and 8.20) that installed a Rust infostealer via a preinstall hook. The package was downloaded 1,479 times in two hours before being deprecated. The malware targeted cloud credentials, cryptocurrency wallets, browser data, and AI coding tool configs.