New npm malware MALFEX hides Overlord RAT and movinlike inside PNG-files targeting Windows devs. #SecurityNews #npm #MALFEX #SupplyChain #Malware #Windows https://thedailytechfeed.com/malfex-malware-npm-attack-hides-windows-threats-inside-png-files/

Checkmarx found eight malicious developer packages with 40,767 downloads—but that number says nothing about how many Windows PCs were infected.

The malware can steal saved p…

https://en.hacks.gr/i-checkmarx-entopise-okto-paketa-poy-mporoyn-na-molynoyn-ypologistes-me-windows/

#MALFEX #Windows #npm

Eight malicious packages on npm were downloaded 40,767 times, researchers say.

Some could enable remote control or collect sensitive data.

That’s a measure of downloads—not a co…

https://en.hacks.gr/okto-kakovoyla-paketa-sto-npm-mporoysan-na-molynoyn-ypologistes-me-windows/

#npm #Windows #MALFEX

MALFEX has been active since 2023, using malicious npm packages to spread Overlord RAT and steal Discord tokens, browser credentials, crypto wallet data and Telegram sessions.

Listen/Read: hackread.com/malfex-npm-w...

#MALFEX #npm #Malware #SupplyChain #Cybersecurity

A long-lived npm and GitHub supply chain used malicious postinstall packages and payloads, tied to malfexteam2027 and cavecrew, with active arms function-flag and cdn-img-fetch. #MALFEX #npm #Portugal