HN
login
Malicious NPM packages evade install-script defenses at runtimebleepingcomputer.com

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a package's normal runtime behavior rather than in…

3 points•sbulaev•10 days ago•0 comments•
#defenses#runtime#malicious#npm#install#evade#script#packages

0 comments

No comments yet.

Read the full thread on Hacker News →

Related stories