supply-chain
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Medium
Summary
A malicious npm package named "imgdecode" has been discovered as part of a long-running supply chain attack campaign dubbed MALFEX. The threat actor has been actively responding to removals by publishing replacements within two days, and the malware chain includes a sophisticated data theft mechanism, collecting information from various sources including cryptocurrency wallets and gaming apps. The campaign has been ongoing since August 6, 2023.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data