Malicious npm packages evade install-script defenses at runtime

An ongoing npm malware campaign uses the “indexed-btree” package, which attempts to impersonate the legitimate “sorted-btree” library. Instead of using installation scripts, the malicious code is hidden in normal runtime behavior, making installation appear clean.