MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

News

Technology & Digital Insights

The latest news, trends and insights on technology, artificial intelligence, cybersecurity, marketing and the digital world.

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of

The Hacker News · October 17, 2026

Voters mostly don’t like AI and data centers, but neither party seems to have an edge

Poll data released Tuesday by the New York Times and Siena University confirms what we've already been seeing, and what politicians are responding to - AI and data centers are incredibly unpopular. Asked if they support or oppose the construction of data centers to power AI tech, 61 percent of the 1,503 likely voters surveyed […]

Tech Sep 15, 2026

September Pixel Drop: New Pixel VIP updates, Pixel Watch features, and more

Our September Pixel Drop is here with an updated Pixel VIP widget, expanded chat Scam Detection, and more.

Marketing & SEO Sep 15, 2026

Matt Van Wagner shares what’s changed, what disappeared and what PPC still gets wrong

Paid search veteran Matt Van Wagner reflects on 20 years of Google Ads, lost PPC tactics, rising automation and more

Marketing & SEO Sep 15, 2026

Gemini 3.8 Live powers Google Search Live

Google just released its Gemini 3.8 Live and 3.8 Live Extended Thinking models and 3.8 Live is now powering Search Live on the Google app.

Marketing & SEO Sep 15, 2026

Google Ads AI needs guardrails, not blind trust ft Mike Ryan

Mike Ryan shares lessons from AI Max mistakes, campaign over-segmentation and advertiser overreactions to Google Ads changes.

Marketing & SEO Sep 15, 2026

Google Chrome launches new metrics to measure ad-heavy websites

Chrome’s new ad metrics give advertisers more visibility into ad clutter, page quality and inventory value.

Security Sep 15, 2026

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig show that skilled human operators can move just as swiftly after gaining initial access. In one instance highlighted by the cloud security company, the threat actor pivoted from a vulnerable Marimo notebook to an SSH

Tech Sep 15, 2026

Build real-time voice applications with Gemini 3.8 Live and 3.5 Transcribe

A look at how developers can build with our latest audio models, Gemini 3.8 Live, 3.8 Live Extended Thinking, and 3.5 Transcribe.

Tech Sep 15, 2026

Introducing Gemini 3.8 Live and 3.8 Live Extended Thinking

Gemini 3.8 Live and Gemini 3.8 Live Extended Thinking are our most advanced live dialogue models yet, built for natural conversation.

Security Sep 15, 2026

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, in more mature organizations, this testing happens continuously rather than as a one-off exercise. But no matter how much you validate against these

Security Sep 15, 2026

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development servers that's designed to steal cloud credentials, configurations from Amazon Web Services (AWS) and Microsoft Azure instances, and infrastructure state files, per F5 Labs. The

Tech Sep 15, 2026

Microsoft announces Windows and Surface event for October 7th

It's been more than two years since the last major Windows event, so Microsoft is heading to San Francisco next month to outline the future of Windows and Surface devices. At an event on October 7th, the company says it will host a "conversation on how local AI will shape the next chapter of the […]

Ready to build a better digital experience?

We create modern multilingual websites, integrate external services and automate content workflows for growing businesses.

Let’s discuss your project