MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

News

Technology & Digital Insights

The latest news, trends and insights on technology, artificial intelligence, cybersecurity, marketing and the digital world.

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of

The Hacker News · October 17, 2026

Razer’s ANC-equipped gaming headset for PS5 and Xbox is almost $100 off

It’s rare to find high-end features like active noise cancellation in a gaming headset under $200, so we’re thrilled that the Razer BlackShark V3 Pro on sale at Woot for $164.99. There are specific models marketed to Xbox and PlayStation, but the Xbox version is the best choice because it also supports PlayStation, PC, Nintendo […]

Tech Sep 08, 2026

ChatGPT Sketch turns your bad drawings into detailed AI images

OpenAI announced ChatGPT Images 2.5 on Tuesday and is adding a new way to tell ChatGPT what you want it to make an image of: by drawing a doodle. With a new feature called Sketch, you can just draw something right inside ChatGPT and then tell ChatGPT how you want it to make an image […]

Marketing & SEO Sep 08, 2026

Google Ads adds new tools to drive and measure in-store sales

Google Ads is making it easier for multi-location businesses to reach nearby customers and measure the campaign in-store sales.

Tech Sep 08, 2026

Missouri and Google partner on AI and career training

Google is partnering with Missouri to provide 1.1 million students free access to Gemini for Education and career certificates. See how to get started.

Tech Sep 08, 2026

We’re helping put 25 new electric semi trucks on the road in Texas.

We’re partnering with Nevoya and the Center for Green Market Activation (GMA) to deploy 25 electric semi trucks.

Marketing & SEO Sep 08, 2026

Inside Google Maps: 72 ranking signals and the architecture behind local search

Newly recovered Google data reveals how entities, web signals, geography, and semantic systems shape local visibility.

Tech Sep 08, 2026

Meta bets on AI agent Muse to catch up in AI race

Meta is making another push to bring artificial intelligence to the masses with Muse, a personal assistant it says can put AI in the hands of virtually anyone. The product is the latest step in a multi-billion dollar strategy overhaul designed to revitalize the company's ailing position in the AI race and help it catch […]

Security Sep 08, 2026

Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has been codenamed StyleSmuggler by Sansec, which discovered zero-day exploitation starting September 4, 2026. "This update resolves a critical

Security Sep 08, 2026

BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams

Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware deployment and tech support scams. The campaign, discovered by the DFIR Report in March 2026, has been codenamed BengalSEO. It has operated out of the Indian state of Rajasthan since at least 2015, driven by two IT service providers named WeConnect

Tech Sep 08, 2026

AlphaGenome Atlas: a high-resolution map of human DNA

We’re introducing AlphaGenome Atlas, a database predicting the effects of every possible single nucleotide variant in the human genome.

Marketing & SEO Sep 08, 2026

Before scaling programmatic SEO, prove the pattern works

Your first 50 pages can tell you whether the next 5,000 are worth building. Here’s how to turn a pilot into a scaling decision.

Tech Sep 08, 2026

A new class action lawsuit questions whether Anthropic broke the law by misleading power users

Anthropic says power users are key to its business - it's prioritized them even when it means cutting off other popular applications, like OpenClaw. But some of these same customers say Anthropic misled them into believing they'd get more out of a top-tier pricing subscription than they did. In an expanded class action lawsuit filed […]

Ready to build a better digital experience?

We create modern multilingual websites, integrate external services and automate content workflows for growing businesses.

Let’s discuss your project