Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

A malicious npm package called indexed-btree was found to conceal its malicious behavior within application code. This approach differs from typical methods that utilize lifecycle scripts. The package is a fake version of the legitimate sorted-btree package, which is a B-tree and indexing utility. Threat actors may be adopting this tactic in response to newly implemented security controls. The malicious package has since been removed. Indexed-btree was designed to mimic the legitimate package, making it potentially difficult to distinguish between the two.