Kompromittierte jscrambler 8.14.0 npm-Veröffentlichung installiert Rust Infostealer
Teaser aus der Quelle
Version 8.14.0 der jscrambler npm-Paket enthielt einen bösartigen Preinstall-Hook, der während der Installation heimlich einen nativen Infostealer für Windows, macOS und Linux ausführte. Die Veröffentlichung vom 11. Juli 2026 erforderte keine Importe oder CLI-Aufrufe; die Installation von 8.14.0 reichte aus, um den Schädling zu aktivieren. Socket identifizierte das Problem sechs Minuten nach der Veröffentlichung.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei The Hacker News lesenMehr zu Compromised
Weitere Advisories
- Ohne Bewertungosv:CLEANSTART-2024-BH66439compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Ohne Bewertungosv:CLEANSTART-2024-AH68885fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine
- Ohne Bewertungosv:CLEANSTART-2026-RB02560WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known session ID for that of an authent...
- Ohne Bewertungosv:CLEANSTART-2024-DK66902As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation
- Ohne Bewertungosv:CLEANSTART-2024-DY60209compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown
- Ohne Bewertungosv:CLEANSTART-2024-UQ28182compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Ohne Bewertungosv:CLEANSTART-2024-UQ62409By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact with handles that the unprivileged pr...
- Ohne Bewertungosv:CLEANSTART-2024-KC30952If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bounds write would have occurred leading to memory corruptio...
Weitere News-Einträge
- Technical University of Munich (TUM) IT security incident: myTUM passwords stolen, TUMonline taken offlineSicherheitsvorfallpwn.watch
- Cyberattack Hits French Blood Bank Site but No Blood Products Are CompromisedNewsSecurityWeek
- Building incident playbooks for machine identity breachesNewsCSO Online
- Attackers turned OpsShield’s trusted update channel into a supply-chain attackNewsCSO Online
- Binance says hackers who stole billions in crypto spent months planning heistNewsArs Technica — Security
- Binance says hackers who stole billions in crypto spent months planning the heistNewsArs Technica — Security
- APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android ExploitsNewsThe Hacker News
- US charges two Canadians accused of hacking US universitiesNewsBleepingComputer
Quelle: https://thehackernews.com/2026/07/compromised-jscrambler-8140-npm-release.html
ID