MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon - The Hacker News
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX.
The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8. " It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of the package is 1.0.3.
This article is an excerpt. To read the full content, visit the original source. The Hacker News
Related articles
His scanner wouldn’t work on Linux — so he let Claude study the Windows driver - The New Stack
He gave Claude Code the manufacturer’s Windows driver to study, got a working Linux scanner in hours, then released a harness so others can do the same.
Your Windows PC runs dozens of background services you never asked for, and most can go - MakeUseOf
Oluwaseun is a tech writer and editor whose career began in 2021. Over the years, he has built a strong portfolio of how-to guides, reviews, tech news stories, comparison articles, and explainers, covering Windows, Android, hardware and apps, consumer tech, and gaming. His work has appeared on publications like Techloy and Itechguides, and he has also written with SEO agencies such as OutreachX. He joined MakeUseOf (MUO) in 2025 to share his expertise with an even wider audience while pursuing a Higher National Diploma (HND) in Computer Science.
0 comments
No comments yet. Be the first to share your thoughts!