Malicious npm Package 'imgdecode' Hides Shellcode Loader

Researchers have uncovered a malicious npm package named ‘imgdecode’ as part of the MALFEX software supply chain attack campaign. The package includes a Windows native addon acting as a shellcode loader and has accumulated nearly a thousand downloads from the official registry.