Tuesday 22 September 2026 06:18:27 GMT+02:00
Netcrook
#runtime code
A Package That Looked Clean Until It Ran
A malicious npm package called indexed-btree illustrates a sharper supply-chain trick: hiding bad behavior in normal runtime code, beyond the reach of install-script checks.
Android Banking Droppers Are Changing the Game Before the Payload Even Lands
A packaging shift in Android malware is making store review and basic scanning less useful, while vendor telemetry points to fewer blocked mobile attacks in Q2 than in Q1.