MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

The Hacker News · Saturday, 17 October 2026 at 11:11 (2h ago) · Original article ↗

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX.

The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Encryption Is Getting Squeezed From All Sides

Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.

Wired 1h ago

Security

Cybercrims go beyond stealing data to attack physical building systems

'Hold my beer, have fun getting into your offices'

The Register 2h ago

Security

Ministers must be honest about Russian threat to UK, says former Foreign Office head

Peter Ricketts calls for more resilience in protecting banking, energy and water systems from cyber-assaults Ministers need to be honest with the British public about the immediate threat posed by Russia, which could soon lead to lives being lost, a former national security…

The Guardian Technology 3h ago

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

More Security & Privacy

Encryption Is Getting Squeezed From All Sides

Cybercrims go beyond stealing data to attack physical building systems

Ministers must be honest about Russian threat to UK, says former Foreign Office head