id: 3184
uid: CKcZ0
insdate: 2026-09-22 11:10:08
title: Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
additional: A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle scripts, indicating that threat actors are likely shifting tactics in response to recent security controls.

"Indexed-btree is a malicious npm package mimicking the legit sorted-btree package, an ordinary B-tree/indexing utility," Checkmarx said. "
category: Cybersecurity
md5:
guid: https://thehackernews.com/2026/09/malicious-npm-package-indexed-btree-hid.html
source_url: https://thehackernews.com/2026/09/malicious-npm-package-indexed-btree-hid.html
updated:
image:
author_name:
author_link: