MALFEX npm包“imgdecode”隐藏Windows Native Addon中的Shellcode加载器

网络安全研究人员发现了一个恶意npm软件包，该软件包是最近披露的被称为MALFEX的软件供应链攻击活动的一部分。名为“imgdecode”的包已上传

原文标题：MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

信源：The Hacker News ｜ 阅读原文

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user nam

—— 开源情报自动采集 · 网