Suspicious 86% javascript Download

jscrambler 8.17.0

preinstall spawns hidden native binary

npm import silently starts a concealed sidecarNode calls imported writeFileSync
SHA-2568aabcb503cf8e83c9c66337a5f4e9b589f0ed2001a4417ca96624519d5d6ebbc
URLhttps://registry.npmjs.org/jscrambler/-/jscrambler-8.17.0.tgz
MaleculeO₃(S₂As₂Er)H₇(Cm₇Cr₃Db₉F₆Os₃Po₅U)Md₂(InPa₇)

Also flagged by osv (MAL-2026-10187: Malicious code in jscrambler (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.