MALFEX npm Package ‘imgdecode’ Hides Shellcode Loader in Windows Native Addon

Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX.

The package, named “imgdecode,” was uploaded to the package registry on September 30, 2026, by a… Continue reading MALFEX npm Package ‘imgdecode’ Hides Shellcode Loader in Windows Native Addon→

Posted in Uncategorized

Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel

Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets.
The post Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel appeared first on SecurityWeek.
Continue reading Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel→