Malicious npm packages evade install-script defenses at runtime

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a package's normal runtime behavior rather than in installation scripts.

Read at the source

Summary written for cymesh.dev. The full article lives at BleepingComputer.

Topics

supply-chain malware

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Talk to us See cymesh.net

~/related/malicious-npm-packages-evade-install-script-defenses-at-runtime-1c24ps

2026-10-02 05:00 UTC[info]

Botnets, adversarial attacks and data poisoning top leaders’ AI threat list

Help Net Securityai malware

2026-10-01 19:32 UTC[med]

Microsoft says threat actors are ahead in the early AI race

BleepingComputerai malware windows

2026-10-01 18:16 UTC[low]

Researchers find Chinese hacking campaigns targeting AI firms, Asian governments

The Recordphishing ai malware

2026-10-01 14:37 UTC[info]

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

The Hacker Newsmalware

2026-10-01 11:45 UTC[med]

How Financial Services Companies Can Modernize Their Software Supply Chain

The Hacker Newssupply-chain

2026-10-01 10:51 UTC[info]

Treasury Blacklists Most-Wanted ATM Malware Developer and His Network

SecurityWeekmalware