Entity coverage

npm (Jscrambler package)

Every NG Tech LLC signal, daily brief, and feature tied to npm (Jscrambler package), grouped by publish date.

All insights Jump to archive

1 published item.

Coverage grouped by day

Every published piece for npm (Jscrambler package), newest first.

# Jul 11, 2026

1 item

Signal 1 sources

npm supply-chain attack on the Jscrambler package harvests MCP server credentials…

On July 11, 2026, a compromised jscrambler npm package (version 8.14.0) used a preinstall hook to drop native binaries that specifically harvested Model Context Protocol server co…

Read article