Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available... Weiterlesen: MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Nati…
Intelligence View
⚡ tsecurity.de Intelligence
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1059TA0002 · Execution
Command and Scripting Interpreter
Mitigation: M1038 Execution Prevention & Script Block Logging
Quelle: Kontext-Klassifikation des Artikeltextes
Execution
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
10 Quellen
Closing (matrix-conf-2026)
9 weitere Quellen
CChaos Computer Clubvor 20 Std.Widgets Working Group (matrix-conf-2026) CChaos Computer Clubvor 20 Std.A faster, rustier Element Web (matrix-conf-2026) CChaos Computer Clubvor 20 Std.Matrix as an App Backend: The perfect container for private structured Data (matrix-conf-2026) CChaos Computer Clubvor 20 Std.Common challenges for organizations when deploying [matrix] (matrix-conf-2026) CChaos Computer Clubvor 20 Std.Feature asymmetry in interoperable messaging - a barrier for mitigating network effects? (matrix-conf-2026) CChaos Computer Clubvor 20 Std.The Engineering Behind Matrix Notifications (matrix-conf-2026)
+3
9 Quellen
CVE-2026-83387 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE JDBC improper authorization (Nessus ID 370276)
8 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2026-101516 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition Libraries improper authorization (WID-SEC-2026-4079) VVulDB Updatesvor 4 Std.CVE-2026-83376 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE JSSE improper authorization (WID-SEC-2026-4079) VVulDB Updatesvor 4 Std.CVE-2026-83374 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE Security privileges management (WID-SEC-2026-4079) VVulDB Updatesvor 4 Std.CVE-2026-83380 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition JAAS information disclosure (WID-SEC-2026-4079) VVulDB Updatesvor 4 Std.CVE-2026-83378 | Oracle Java SE 21.0.12.1/25.0.4.1/27 Compiler privileges management (WID-SEC-2026-4079) VVulDB Updatesvor 4 Std.CVE-2026-83381 | Oracle Java SE up to 27 Security privileges management (WID-SEC-2026-4079)
+2
6 Quellen
Making Matrix Feel Like WhatsApp Without Centralizing It
5 weitere Quellen
MMatrixdotorgvor 2 Std.Matrixdotorg: Making Matrix Feel Like WhatsApp Without Centralizing It CChaos Computer Clubvor 20 Std.When the Bridge Looks Like an Attacker: Building a Focus App on Matrix Instagram Bridges (matrix-conf-2026) CChaos Computer Clubvor 20 Std.Making Matrix Feel Like WhatsApp Without Centralizing It (matrix-conf-2026) MMatrixdotorgvor 2 Std.Matrixdotorg: When the Bridge Looks Like an Attacker: Building a Focus App on Matrix Instagram Bridges MMatrixdotorgvor 2 Std.Matrixdotorg: When the Bridge Looks Like an Attacker: Building a Focus App on Matrix Instagram Bridges
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4278845/windows-tipps-security/malfex-npm-package-imgdecode-hides-shellcode-loader-in-windows-native-addon/