Cybersecurity · 2 views
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into dllhost.exe.
Cybersecurity 
Story intelligence
Coverage Single outlet Single-outlet story
Views 2 Community interest
Brief read Under 1 min brief 36 words
AI Summary
Cybersecurity researchers identified a malicious npm package called “imgdecode” linked to the MALFEX software supply chain attack campaign. The package was uploaded to the npm registry on September 30, 2026 by a user identified as “malfexteste8.”
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
Part of MALFEX coverage 3 tracked stories
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery ChannelContinue reading
- Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 TenantsContinue reading
- BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge BugsContinue reading
- Critical BlockStrap flaw lets hackers run code on Magento serversContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow