Malicious npm Package indexed-btree Executes Loader at Runtime After npm Lifecycle Script Block
A malicious npm package named indexed-btree hid its loader in runtime code, evading npm's new lifecycle-script restrictions and earning attackers over €230k.