A Rust-based infostealer was distributed through a compromised version of the jscrambler npm package. It steals cloud credentials, cryptocurrency wallets, password manager vaults, browser secrets, and AI tool configs, with persistence on Windows and macOS and eBPF capabilities on Linux.