What Happened
A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle scripts, indicating that threat actors are likely shifting tactics in response to recent security controls. "Indexed-btree is a malicious npm package mimicking the legit sorted-btree package, an ordinary B-tree/indexing utility," Checkmarx said. "
Why It Matters
The report states that the counterfeit npm package "indexed-btree" impersonated the legitimate "sorted-btree" library and concealed an obfuscated loader in the runtime method BTree.prototype.set() rather than using installation lifecycle scripts; the package and associated repository were removed.[2] This represents a software supply-chain risk that can affect AI applications relying on compromised JavaScript dependencies. RealGround analysis: dependency provenance checks, SBOM coverage, package behavior monitoring, and runtime testing should supplement controls focused only on install-time scripts.
RealGround Analysis
This signal maps to AI supply chain. Organizations using AI agents, LLM APIs, SaaS integrations, or sensitive data workflows should review whether this class of issue could create unauthorized tool execution, data leakage, weak approval gates, or unmanaged supply-chain exposure.
Recommended Actions
- Restrict AI agent tool permissions and production write paths.
- Review sensitive data access across prompts, logs, embeddings, memory, and SaaS integrations.
- Add human approval workflows for high-impact or state-changing actions.
- Run prompt injection and indirect prompt injection tests against affected workflows.
- Document the owner, control gap, and remediation deadline for this risk class.
Source
https://thehackernews.com/2026/09/malicious-npm-package-indexed-btree-hid.html