negativeSYS.SOURCE: The Hacker News• 2026-10-17T16:41:56+05:30

Discovery of Malicious npm Package 'imgdecode' in MALFEX Supply Chain Attack

#npm #malware #supplychain

Cybersecurity researchers identified a malicious npm package, 'imgdecode,' as part of the MALFEX supply chain attack, which hides a shellcode loader within a Windows native addon. The package, uploaded by 'malfexteste8,' has been downloaded 979 times, posing a risk to developers relying on npm dependencies.

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX.

The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of

Read original article

*** END OF TRANSMISSION ***

> GLOBAL SOLAR POWER EXCEEDS NUCLEAR POWER CAPACITY FOR FIRST TIME > DISCOVERY OF MALICIOUS NPM PACKAGE 'IMGDECODE' IN MALFEX SUPPLY CHAIN ATTACK > MAPQUEST INTEGRATES FLOCK CAMERA LOCATIONS INTO NEIGHBORHOOD MAPPING SERVICE > DEEPSEEK V4.1 FLASH 1017: COST-EFFICIENT SPARSE MIXTURE-OF-EXPERTS MODEL > DEEPSEEK-V4.1-FLASH-1017 MODEL RELEASE ON HUGGING FACE > UNAUTHORIZED ACCESS TO 173 MICROSOFT 365 TENANTS VIA COMPROMISED CONNECTWISE CREDENTIALS > LLM SPEED EVALUATION TOOL FOR LOCAL HARDWARE SELECTION > MARK WAHLBERG LAUNCHES AFFORDABLE LONGEVITY-FOCUSED GYM CONCEPT TO COMPETE WITH HIGH-END WELLNESS STARTUPS > BUTLERIAN JIHAD > FLEXPORT SEEKS BIZ OPS LEADER TO DRIVE STRATEGIC GROWTH IN CEO OFFICE> GLOBAL SOLAR POWER EXCEEDS NUCLEAR POWER CAPACITY FOR FIRST TIME > DISCOVERY OF MALICIOUS NPM PACKAGE 'IMGDECODE' IN MALFEX SUPPLY CHAIN ATTACK > MAPQUEST INTEGRATES FLOCK CAMERA LOCATIONS INTO NEIGHBORHOOD MAPPING SERVICE > DEEPSEEK V4.1 FLASH 1017: COST-EFFICIENT SPARSE MIXTURE-OF-EXPERTS MODEL > DEEPSEEK-V4.1-FLASH-1017 MODEL RELEASE ON HUGGING FACE > UNAUTHORIZED ACCESS TO 173 MICROSOFT 365 TENANTS VIA COMPROMISED CONNECTWISE CREDENTIALS > LLM SPEED EVALUATION TOOL FOR LOCAL HARDWARE SELECTION > MARK WAHLBERG LAUNCHES AFFORDABLE LONGEVITY-FOCUSED GYM CONCEPT TO COMPETE WITH HIGH-END WELLNESS STARTUPS > BUTLERIAN JIHAD > FLEXPORT SEEKS BIZ OPS LEADER TO DRIVE STRATEGIC GROWTH IN CEO OFFICE