CyberSecurity News
Malicious B-tree NPM Package Accumulates Millions of Downloads
SecurityWeek
· September 22, 2026AI summary
A malicious NPM package called indexed-btree has been discovered, masquerading as a legitimate package named sorted-btree. The package contains a hidden malware trigger within its prototype method. This malicious package has accumulated millions of downloads.
This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.