Suspicious NPM Math Library Found Hiding Encrypted Loader in Package

Security researchers at SafeDep discovered an NPM package posing as a math library that conceals an encrypted loader within its code. The package raises red flags because legitimate math libraries have no justifiable reason to include obfuscated or encrypted execution components. This technique is commonly associated with malicious packages that attempt to evade static analysis and security scanning tools. The finding highlights ongoing supply chain security risks within the NPM ecosystem, where threat actors disguise malware as innocuous utility libraries. Developers are advised to scrutinize dependencies carefully, especially those with unusual or unexplained code components.