Node.js runtime loader trigger via indexed-btree sharedLoad.min.js

Ibrahim Saud@tektrix

•updated Sep 21, 2026•0•0•4

Detects execution of Node.js processes loading specifically named JavaScript files ('sharedLoad.min.js') within the 'node_modules/indexed-btree' directory, or file modifications involving these specific paths, which may indicate a malicious loader or supply chain compromise attempt.