Security News
Research
Supply Chain Attack on Rspack npm Packages Injects Cryptojacking Malware
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
jscrambler-loader
Advanced tools
Add obfuscation to your build process with webpack and jscrambler-loader.
DISCLAIMER: If you are looking for Jscrambler 3.8 or below please go to this page.
Install the Jscrambler webpack loader.
npm install -D jscrambler-loader
Option -D
will make sure it is installed as a devDependency
.
In order to start using jscrambler-loader you will need to setup your configuration file named .jscramblerrc
. This file will contain all the necessary options for your application protection.
You may put your config file in one of these directories.
Here's an example of how your .jscramblerrc
file should look like:
// .jscramblerrc
{
"keys": {
"accessKey": "XXXXXX",
"secretKey": "XXXXXX"
},
"applicationId": "XXXXXXXXXXXX",
"params": [
{
"name": "whitespaceRemoval"
},
{
"name": "charToTernaryOperator"
}
]
}
You will need your credentials and Application ID in order to protect your application.
Navigate to your profile page and grab your accessKey
and secretKey
at the API Credentials section.
Your applicationId
can be found inside your application page just below your application name. Click the copy to clipboard icon to copy the applicationId
.
You can also grab your current configuration on your application page. This will download a .json
file containing a valid configuration with your currently selected options.
Keep in mind that the params
object is optional and if it is not provided we will use your previous configuration.
This is a simple example on how to add jscrambler-loader
to your webpack configuration:
// webpack.config.js
module.exports = {
entry: './index.js',
output: {
filename: 'bundle.js'
},
module: {
loaders: [
{
test: /\.js$/,
exclude: /node_modules/,
loader: 'jscrambler-loader'
}
]
}
};
This will use your .jscramblerrc
as your Jscrambler protection configuration.
You can find some working examples here
FAQs
jscrambler module loader for webpack
The npm package jscrambler-loader receives a total of 0 weekly downloads. As such, jscrambler-loader popularity was classified as not popular.
We found that jscrambler-loader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.
Security News
Sonar’s acquisition of Tidelift highlights a growing industry shift toward sustainable open source funding, addressing maintainer burnout and critical software dependencies.