MALFEX Malicious npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
RedSide Security October 17, 2026 Cybersecurity 8 views
A malicious npm package named imgdecode, linked to the MALFEX supply chain campaign, hides a shellcode loader inside a Windows native addon—showing how attackers are moving payloads into compiled code that traditional scanners struggle to inspect.
Continue reading: MALFEX Malicious npm Package 'imgdecode' Hides She…