Cyber CrimeMALFEX npm Campaign Hidden in Eight Packages
CloudSEK and Checkmarx say a lone actor shipped 12 npm packages since 2023, eight flagged malicious and downloaded 40,767 times.
> Search
2 results for “checkmarx”
2 results for “checkmarx”
Cyber CrimeCloudSEK and Checkmarx say a lone actor shipped 12 npm packages since 2023, eight flagged malicious and downloaded 40,767 times.
Cyber CrimeCheckmarx found the indexed-btree npm package evades install-script defenses by hiding malware in a runtime method, and nine related packages were removed.