malware analysis

2 stories

Sep 22, 2026

Malicious npm Package indexed-btree Executes Loader at Runtime After npm Lifecycle Script Block

A malicious npm package named indexed-btree hid its loader in runtime code, evading npm's new lifecycle-script restrictions and earning attackers over €230k.

Sep 21, 2026

TASK#STOMP PowerShell backdoor steals documents, Wi-Fi passwords, and clipboard data

Researchers detail the TASK#STOMP PowerShell backdoor that exfiltrates business documents, Wi-Fi credentials, clipboard contents.