Malware in imgdecode

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18196 Malicious code in imgdecode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c49d68e668c31b846588dba958146553f2f144a6778073dfeeffd14af78faf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in imgdecode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c49d68e668c31b846588dba958146553f2f144a6778073dfeeffd14af78faf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been...