Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method. The NPM ecosystem has suffered another supply chain attack in which a malicious package ...