Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

A malicious npm package named "indexed-btree" hid its malicious loader in runtime application code instead of using lifecycle scripts, according to Checkmarx. The package mimics the legitimate sorted-btree utility, indicating threat actors are shifting tactics to evade recent security controls. The malicious behavior was observed before the package was removed from the registry.