Unverified50% confidenceDecision RuleExact time
怀疑执行过恶意版本后应默认所有敏感凭证（npm token、云服务密钥、Git/SSH凭证、CI secret）已泄露并立即轮换
1
Sources
50%
Confidence
Long-term
Relevance
7/13/2026
First Seen
Sources
jscrambler npm Package Compromised: Supply Chain Attack Incident Response and Protection Guide
redditr/programming7/11/2026
Related Claims
Cite This Claim
Stable URI
https://kongchang.com/claim/500928API
curl https://kongchang.com/api/v1/knowledge/claims/500928MCP
get_claim(id=500928)