TGViewer
The Hacker News The Hacker News @thehackernews · 163K subscribers
Post #10366 3.1K
🚨 A malicious npm package is still available after 979 downloads.

Part of the MALFEX campaign, imgdecode hides a Windows DLL that can fetch encrypted shellcode from GitHub and inject it into dllhost.exe when loaded from a Windows console.

Read: https://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.html
  • 👍 4
  • 🔥 2
  • 😁 2
  • ⚡ 1
Open in Telegram All posts from @thehackernews
More from @thehackernews
  1. Oct 17, 2026‼️ ALERT: Attackers used a compromised ConnectWise Cloud Backup credential to access 173 M…
  2. Oct 16, 2026‼️ A 37-year-old BSD bug can still help gain root on OpenBSD 7.9. Researchers released a l…
  3. Oct 16, 2026‼️ NEW - Attackers tampered with AOMEI Backupper’s update servers in 5–10-minute bursts, d…
  4. Oct 16, 2026🚨 UAT-11985 is targeting Taiwan research affiliates with fake event invitations and tampe…
  5. Oct 16, 2026“Mitigated” doesn't always mean the threat is gone. In 2025 SOC data, live memory scans fo…
  6. Oct 16, 2026⚠️ An OpenAI research model spent test ETH from a third-party wallet without permission to…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →