THREATNOIR
Subscribe
Back to show
Red vs Blue Show

Malicious npm Package Hides Payload in Runtime

Sep 21, 2026 · 1:40

A malicious npm package named indexed-btree concealed data-exfiltration code in runtime prototype methods rather than install scripts, exfiltrating system…

X

Watch next

React Server Components Open Door to Unauthenticated RCE
1:40

React Server Components Open Door to Unauthenticated RCE

Nov 9, 2026

Certificate Flaw Hands Attackers Full Linux Control
1:40

Certificate Flaw Hands Attackers Full Linux Control

Nov 2, 2026

Gheist Turns GitHub Tokens Into Secret Pipelines
1:40

Gheist Turns GitHub Tokens Into Secret Pipelines

Oct 26, 2026

WAF Turned Weapon: SiteGuard Root Takeover
1:20

WAF Turned Weapon: SiteGuard Root Takeover

Oct 19, 2026

Croatian Gambling Firm Fined for Fingerprint Grab
1:00

Croatian Gambling Firm Fined for Fingerprint Grab

Oct 12, 2026

NetScaler SAML Zero-Day Exploited in the Wild
1:40

NetScaler SAML Zero-Day Exploited in the Wild

Oct 5, 2026

Two NetScaler Zero-Days Exploited in the Wild
1:40

Two NetScaler Zero-Days Exploited in the Wild

Sep 28, 2026

One Click to GrayRabbit Backdoor
1:40

One Click to GrayRabbit Backdoor

Sep 14, 2026

Invisible Unicode Hides Phishing in Plain Sight
1:20

Invisible Unicode Hides Phishing in Plain Sight

Sep 7, 2026