Veille CyberInfra — Veille cybersecurite : Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers Veille CyberInfra — Veille cybersecurite : Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities Veille CyberInfra — Veille cybersecurite : Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed Veille CyberInfra — Veille cybersecurite : Vanderbilt University hit in BYOD ransomware attack, data theft claimed Veille CyberInfra — Veille cybersecurite : Turla hackers use new Cereal malware to spy on govt Exchange servers Veille CyberInfra — Veille cybersecurite : SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution Veille CyberInfra — Veille cybersecurite : Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers Veille CyberInfra — Veille cybersecurite : Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities Veille CyberInfra — Veille cybersecurite : Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed Veille CyberInfra — Veille cybersecurite : Vanderbilt University hit in BYOD ransomware attack, data theft claimed Veille CyberInfra — Veille cybersecurite : Turla hackers use new Cereal malware to spy on govt Exchange servers Veille CyberInfra — Veille cybersecurite : SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution

Veille cybersecurite : MALFEX npm Package ‘imgdecode’ Hides Shellcode Loader in Windows Native Addon

17/10/2026

Source : The Hacker News

Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX.

The package, named « imgdecode, » was uploaded to the package registry on September 30, 2026, by a user named « malfexteste8. » It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of

Lire l’article original

Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.

← Retour au blog