#5
The Hacker News
general
October 17, 2026 at 11:11 UTC
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
By [email protected] (The Hacker News)
AI Summary
The MALFEX supply chain attack campaign includes a malicious npm package named 'imgdecode', uploaded on September 30, 2026, by user 'malfexteste8', which conceals a shellcode loader inside a Windows native addon. The package accumulated 979 downloads before discovery and remains available on npm as of publication. Developers using npm in Windows build pipelines should audit dependencies for 'imgdecode' and scan for native addon (.node file) anomalies.
Relevance score: 70.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →