CTI · corroborated · 2026-09-21

indexed-btree npm Package Executes Malware at Runtime via BTree.set()

Full story & timeline

Actors

—

Malware / tools

indexed-btree

Campaigns

npm runtime supply-chain malware

CVEs

—

Victim sectors

technologydevelopment

Geography

—

MITRE ATT&CK

T1195 Supply Chain Compromise Initial Access
T1059 Command and Scripting Interpreter Execution
T1102 Web Service Command and Control

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

Source on GitHub