Dangerous package 'imgdecode' downloaded 979 times from npm library

SafeDep reports that a malicious npm package named imgdecode, downloaded 979 times, conceals a loader within a compiled Node.js addon that executes a Windows dynamic-link library. Linked to the long-running MALFEX supply chain campaign, the package exemplifies ongoing risks in package registry security. According to researchers, “imgdecode” hides... Weiterlesen: Dangerous package 'imgdecode' downloaded 979 times from npm library