indexed-btree: npm Supply Chain Malware Executes at Runtime and Uses a Smart Contract on Ethereum Sepolia for C2

1. Basic Information Original Title: npm 'btree' Malware Campaign Affects Millions of Downloads, No Need for Install Script Source: Checkmarx Zero Publication Date: 2026-09-17 Update Date: None Severity: High Severity Justification: The malicious npm packages do not use install scripts and instead launch a loader from within a normal library... Weiterlesen