> Search

npm malware hides in runtime, not install

Checkmarx found the indexed-btree npm package evades install-script defenses by hiding malware in a runtime method, and nine related packages were removed.