jscrambler npm Package Hijacked to Drop AI Config Infostealer
jscrambler npm Package Hijacked to Drop AI Config Infostealer is a critical-severity supply chain compromise issue in jscrambler, a MCP server. Affected: 8.14.0 || 8.16.0 || 8.17.0 || 8.18.0 || 8.20.0.
Is jscrambler running on your developers' machines? Anomity finds every device with this MCP server installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
jscrambler-npm-package-hijacked-to-drop-ai-config-infostealer- Severity
- critical
- Attack type
- Supply chain compromise, Credential theft
- Component
- jscrambler · MCP server
- Package
jscramblernpm- Known exploited
- No known exploitation
- Published
- Last verified
What is this vulnerability?
An attacker used a stolen credential to push malicious jscrambler npm versions carrying a cross-platform Rust infostealer via a preinstall hook. The malware specifically sweeps AI coding tool config files for Claude Desktop, Cursor, Windsurf, VS Code, and Zed, where API keys and MCP server credentials sit, alongside cloud keys and wallets.
Affected versions
| Affected | Fixed in |
|---|---|
8.14.0 || 8.16.0 || 8.17.0 || 8.18.0 || 8.20.0 | No fixed version listed |
Am I affected by this vulnerability?
You are affected if you run jscrambler 8.14.0 || 8.16.0 || 8.17.0 || 8.18.0 || 8.20.0.
How do I fix it?
Move off jscrambler 8.14.0 through 8.20.0 to 8.22.0, rotate cloud, npm, and AI tool API keys, and block C2 IPs 37.27.122.124 and 57.128.246.79.
How do I find every machine running jscrambler?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run jscrambler and which version, then enforce a policy on it.