"MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon"
TheHackerNews뉴스
The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into dllhost.exe.
출처: [The Hacker News](https://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.html)