
Cyber Attacks
MALFEX Campaign Publishes imgdecode npm Package with Hidden Shellcode Loader
The malicious npm package imgdecode, part of the long-running MALFEX supply chain attack, hides a loader that downloads encrypted shellcode from GitHub.
Everything Threat Times has reported about CloudSEK: 2 stories, newest first. Part of our Cyber Attacks coverage.

The malicious npm package imgdecode, part of the long-running MALFEX supply chain attack, hides a loader that downloads encrypted shellcode from GitHub.

Researchers attribute eight malicious npm packages delivering the Overlord RAT and stealers to a single threat actor since August 2023.