npm · registry.npmjs.org
jscrambler
Large Javascript Payload
Early detection
PkgRadar flagged this 6h before public disclosure
Detected 2026-07-11 · disclosed as MAL-2026-10187 on 2026-07-11
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
8.20.0 | High risk | 0 | 2026-07-12 |
8.22.0 | Low risk | 0 | 2026-07-11 |
8.18.0 | Low risk | 0 | 2026-07-11 |
8.17.0 | Review | 1 | 2026-07-11 |
8.16.0 | High risk | 45 | 2026-07-11 |
8.15.0 | Low risk | 0 | 2026-07-11 |
8.14.0 | High risk | 45 | 2026-07-11 |
8.13.0 | Low risk | 0 | 2026-06-30 |
8.12.0 | Low risk | 0 | 2026-06-15 |
8.11.1 | Low risk | 0 | 2026-06-11 |
8.11.2 | Low risk | 0 | 2026-06-11 |
8.12.0-next.0 | Low risk | 0 | 2026-06-11 |
8.11.3 | Low risk | 0 | 2026-06-11 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]