Security Vendor's npm Package Stole AI Coding Keys
Jscrambler's npm package was hijacked to steal Claude Desktop, Cursor, and VS Code credentials via Rust infostealer — days after npm 12 shipped.
July 14, 2026 · 15 min readsupply chain security
Every THE D[AI]LY BRIEF article on supply chain security — enterprise AI analysis, benchmarks, vendor comparisons, and ROI frameworks for technology and business leaders. Updated as new coverage publishes.
92% Trust AI Code Scanning. 70% Have Vulns in Production.
AI coding assistants produce 1.75x more logic errors and 2.74x more XSS vulnerabilities. 70% of enterprises have AI-generated code vulns in production.
April 15, 2026 · 11 min read