Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Software Supply Chain Campaign October 17, 2026 Evan Lee Salim Cybersecurity researchers have uncovered a newly identified malicious npm package actively targeting Windows environments as part of an ongoing, sophisticated software supply chain attack campaign designated under the codename MALFEX.…
