DevBleepingComputerabout 2 hours ago
Malicious npm Package Bypasses Install-Script Defenses
3 min read
Checkmarx found the npm package indexed-btree hiding malware in its runtime BTree.prototype.set() method, evading npm v12 install-script blocks. It impersonated sorted-btree and reached 2 million weekly downloads before removal.
Level
Hype check
Tap to vote and see what everyone thinks.
