Malicious npm package imgdecode hides a DLL loader that fetches and injects shellcode into dllhost.exe. #MALFEX #npm #SecurityNews #WindowsMalware #SupplyChain #CyberSecurity https://thedailytechfeed.com/malfexs-imgdecode-npm-package-conceals-dll-loader-that-injects-shellcode/

MALFEX's npm imgdecode hides a DLL loader that injects into dllhost.exe the moment you require() it. https://intel.threadlinqs.com/threat/TL-2026-3799 #ThreatIntel #Rakhni #MALFEX #imgdecode

New npm malware MALFEX hides Overlord RAT and movinlike inside PNG-files targeting Windows devs. #SecurityNews #npm #MALFEX #SupplyChain #Malware #Windows https://thedailytechfeed.com/malfex-malware-npm-attack-hides-windows-threats-inside-png-files/

Checkmarx found eight malicious developer packages with 40,767 downloads—but that number says nothing about how many Windows PCs were infected.

The malware can steal saved p…

https://en.hacks.gr/i-checkmarx-entopise-okto-paketa-poy-mporoyn-na-molynoyn-ypologistes-me-windows/

#MALFEX #Windows #npm

Eight malicious packages on npm were downloaded 40,767 times, researchers say.

Some could enable remote control or collect sensitive data.

That’s a measure of downloads—not a co…

https://en.hacks.gr/okto-kakovoyla-paketa-sto-npm-mporoysan-na-molynoyn-ypologistes-me-windows/

#npm #Windows #MALFEX

MALFEX has been active since 2023, using malicious npm packages to spread Overlord RAT and steal Discord tokens, browser credentials, crypto wallet data and Telegram sessions.

Listen/Read: hackread.com/malfex-npm-w...

#MALFEX #npm #Malware #SupplyChain #Cybersecurity

A long-lived npm and GitHub supply chain used malicious postinstall packages and payloads, tied to malfexteam2027 and cavecrew, with active arms function-flag and cdn-img-fetch. #MALFEX #npm #Portugal