At a glance
Organisation
Organisation not named
The disclosure as indexed does not name the organisation.
The disclosure as indexed does not name the organisation.
Kind
Breach or incident
Sector
Sector not stated
Severity
Medium
Disclosed
Jul 2026
Indexed
13 Jul 2026
Source
Summary
The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm package that has been downloaded almost 1,500 times.
This record says what was disclosed, when and by whom. It does not say that any person or firm was affected.
Related in this sector
Critical3 Nov 2026
CSX data breach
Sector not stated · Records not stated
Jack Krumm reports: We’re learning more about a major data privacy breach and the tens of thousands of people nationwide who could be affected. CSX, one of the country’s largest transportation companies, experienced a…
3 Nov 2026
Critical1 Nov 2026
Nikkei Inc.
Sector not stated · Records not stated
Third data breach in about a month; exposed 1.83 million personal information records.
1 Nov 2026
High1 Nov 2026
Malaysia Airlines
Sector not stated · Records not stated
Passenger data was exposed for about 3 years through a breach at travel technology provider Amadeus.
1 Nov 2026
Medium31 Oct 2026
Chainalysis
Sector not stated · Records not stated
Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email addresses, user IDs, and…
31 Oct 2026