Official jscrambler npm Package Compromised Across Multiple Releases

The official jscrambler npm package was compromised across multiple releases, delivering a stealthy, cross-platform infostealer that targets browser credentials, Bitwarden vaults, and Steam sessions, evades common install-script detection, and persists via OS-level mechanisms, putting tens of thousands of developers and their environments at risk.