Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available... Weiterlesen: MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Nati…
Intelligence View
⚡ tsecurity.de Intelligence
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1059TA0002 · Execution
Command and Scripting Interpreter
Mitigation: M1038 Execution Prevention & Script Block Logging
Quelle: Kontext-Klassifikation des Artikeltextes
Execution
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
35 Quellen
CVE-2026-90129 | Linux Kernel up to 6.18.51/7.2.5 virtio_balloon virtballoon_free_page_report acked resource consumption (WID-SEC-2026-3444)
34 weitere Quellen
VVulDB Updates5 uur geledenCVE-2026-90130 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 vdpa_sim vdpasim_create null pointer dereference (WID-SEC-2026-3444) VVulDB Updates5 uur geledenCVE-2026-90132 | Linux Kernel up to 7.2.5 NTFS setxattr LXUID/LXGID/LXMOD/LXDEV privileges management (WID-SEC-2026-3444) VVulDB Updates5 uur geledenCVE-2026-90133 | Linux Kernel up to 7.2.5 NTFS ntfs_ir_to_ib heap-based overflow (WID-SEC-2026-3444) VVulDB Updates5 uur geledenCVE-2026-90134 | Linux Kernel up to 7.2.5 NTFS Compression ntfs_decompress memory corruption (WID-SEC-2026-3444) VVulDB Updates5 uur geledenCVE-2026-90135 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 Net Device Allocation alloc_netdev_mqs use after free (WID-SEC-2026-3444) VVulDB Updates5 uur geledenCVE-2026-90136 | Linux Kernel up to 6.18.51/7.2.5 AMD HSMP hsmp.c hsmp_hwmon_write power1_cap signed conversion (WID-SEC-2026-3444)
+28
17 Quellen
CVE-2026-96232 | Microsoft .NET/Visual Studio WPF out-of-bounds (Nessus ID 371924)
16 weitere Quellen
VVulDB Updates5 uur geledenCVE-2026-96234 | Microsoft .NET/Visual Studio up to 8.0.31/9.0.20/10.0.12/11.0.0-rc.1 WPF origin validation (Nessus ID 371924) VVulDB Updates5 uur geledenCVE-2026-96235 | Microsoft .NET/Visual Studio WPF CPSTrans::Initialize out-of-bounds write (Nessus ID 371924) VVulDB Updates5 uur geledenCVE-2026-96959 | Microsoft .NET/System.Security.Cryptography.Xml allocation of resources (Nessus ID 371924) VVulDB Updates5 uur geledenCVE-2026-96958 | Microsoft .NET/Visual Studio up to 10.0.12/11.0.0-rc.1/8.0.4/9.0.20 Signed XML algorithmic complexity (Nessus ID 371924) VVulDB Updates5 uur geledenCVE-2026-96960 | Microsoft System.Security.Cryptography.Xml amplification (Nessus ID 371924) VVulDB Updates8 uur geledenCVE-2026-116099 | Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295 Skynet++ Virtual Machine BlitzBanks out-of-bounds write
+10
12 Quellen
CVE-2026-78659 | Go HTTP/2 Server amplification (EUVD-2026-95419 / Nessus ID 371915)
11 weitere Quellen
VVulDB Updates10 uur geledenCVE-2026-116137 | cthackers adm-zip up to 0.6.1 readEntries integrity check (EUVD-2026-109389) VVulDB Updates10 uur geledenCVE-2026-116136 | ProjectSend up to 2.7.1 File Versions FileVersions::link improper authorization (EUVD-2026-109388) VVulDB Updates10 uur geledenCVE-2026-116073 | leon-ai Leon URL getModelFileNameFromURL path traversal (EUVD-2026-109387) VVulDB Updates10 uur geledenCVE-2026-116072 | Docile-Alligator Infinity for Reddit up to 8.3.4 LoginChromeCustomTabActivity cross-site request forgery (EUVD-2026-109386) VVulDB Updates10 uur geledenCVE-2026-116071 | rotki up to 1.44.1 hash predictable salt (EUVD-2026-109385) VVulDB Updates10 uur geledenCVE-2026-116070 | dqzboy Docker-Proxy up to 5.1.9 Hubcmd UI routes/config.js missing authentication (EUVD-2026-109384)
+5
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4278845/windows-tips-security/malfex-npm-package-imgdecode-hides-shellcode-loader-in-windows-native-addon/