JavaScript

indexed-btree: The npm Malware That Waited for a Library Call

Checkmarx found malicious code hidden in an npm library method rather than an install script. Here's what the trigger means for dependency review and incident response.