Security News Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal TheHackerNews Daniel Bender 22 Sep 2026 Share Malicious npm package indexed-btree hid its loader in runtime code, avoiding install hooks after logging millions of downloads.
