Researchers have identified a malicious npm package called 'imgdecode' that is part of a wider supply-chain campaign tracked as MALFEX. Uploaded to the registry on September 30 under the account 'malfexteste8,' the package has racked up nearly 1,000 downloads and conceals a shellcode loader inside a Windows native addon. It remains available on npm as of this writing, a reminder of how slowly malicious packages can get pulled from public registries.
// source: thehackernews.com ↗