#install-script


Malicious npm packages evade install-script defenses at runtime

Sep 20, 2026 // 17:17

An ongoing npm malware campaign involving the ‘indexed-btree’ package shows how threat actors bypass supply chain defenses by hiding malicious code in a package’s normal […]