"Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install"

Malicious jscrambler 8.14.0 runs hidden binaries during npm install on Windows, macOS, and Linux, with no fix available as of July 11, 2026. 출처: [The Hacker News](https://thehackernews.com/2026/07/compromised-jscrambler-8140-npm-release.html)