MALFEX npm Package ‘imgdecode’ Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX.
The package, named “imgdecode,” was uploaded to the package registry on September 30, 2026, by a user named “malfexteste8.” It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of
Source: The Hacker News
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 104.155.102.124 β 1709 requests (recent log) 45.148.10.21 β 843 requests (recent log) 89.167.35.212 β 618 requests (recent
Watchtower Mittags-Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. a password is required β sudo: requests (recent log) Mehr Live-Daten und die komplette Historie im /attacks/ Watchtower-Bereich