Mobile Security & Privacy Malicious "imgdecode" npm Package Discovered in Ongoing MALFEX Software Supply Chain Campaign October 17, 2026 Neng Nana Cybersecurity researchers have uncovered a newly identified malicious npm package actively circulating within the open-source software ecosystem. The package is the latest weapon in a persistent and evolving software supply…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Software Supply Chain Campaign October 17, 2026 Evan Lee Salim Cybersecurity researchers have uncovered a newly identified malicious npm package actively targeting Windows environments as part of an ongoing, sophisticated software supply chain attack campaign designated under the codename MALFEX.…
