Malicious npm packages bypass security via runtime behavior

An ongoing npm malware campaign involving the ‘indexed-btree’ package demonstrates how threat actors bypass supply chain defenses. Rather than hiding malicious payloads in installation scripts, the threat actors execute code during normal runtime behavior, successfully evading traditional detection mechanisms.