Why does mathmain need an encrypted loader?

Why Does an npm Math Library Need an Encrypted Loader? On this page We found a remote access implant hidden inside [email protected] , an npm package that copies the popular mathjs library. The malicious code ships encrypted. It stays dormant until a program solves a specific equation with the library. That equation is the key. When the key matches, the package decrypts a payload and runs it. The ...