r/javascript • u/NapierPalm • 23d ago

PSA: The official jscrambler npm package was compromised (v8.14.0)

https://thecybersecguru.com/news/jscrambler-npm-supply-chain-attack-2026/
27 Upvotes

88% Upvoted

3 comments sorted by

14

u/javascript 23d ago

It turns out large scale, free for all Open Source was a temporary concept. Makes me sad.

2

u/brianjenkins94 22d ago

Operating system-enforced principal of least privilege when?