Jscrambler post-8.18.0 dropper firing via node import or CLI execution of dist/index.js or dist/bin/jscrambler.js
Detects execution of Node.js applications that utilize specific Jscrambler obfuscation versions or the presence of these versions in package.json files, which may indicate the use of compromised or unauthorized supply chain dependencies.
Microsoft Sentinel (KQL)
