{ads}

›

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Written By Saturday, 17 October 2026 Add Comment



October 17, 2026 at 04:41PM

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of

from The Hacker News https://ift.tt/MkRaWij

0 Response to "MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon"

Post a Comment

Subscribe to: Post Comments (Atom)

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads