MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

News

Technology & Digital Insights

The latest news, trends and insights on technology, artificial intelligence, cybersecurity, marketing and the digital world.

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of

The Hacker News · October 17, 2026

Nintendo isn’t scared of GTA VI

There's never really been a game like Grand Theft Auto VI before, one that has completely altered the lineup of games around it. Everyone, it seems, is scared of going up against Grand Theft Auto VI. Everyone, that is, except for Nintendo. The company held a 30-minute showcase this morning focused entirely on its Legend […]

Tech Sep 08, 2026

Helping small businesses win with AI

We took to Route 66 to help Main Street entrepreneurs build confidence with AI. Explore free tools at Grow.Google/SMB.

Marketing & SEO Sep 08, 2026

The 11x ROAS account that lost money on every order

High ROAS can mask negative contribution, weak incrementality, and costly inventory decisions. Here's how to measure what really matters.

Marketing & SEO Sep 08, 2026

Google says DMA changes in EU resulted in worse degradation of search quality ever

Google said "the changes mark the largest reduction in quality of service ‌at the world's most popular internet search engine in its 29-year search history."

Security Sep 08, 2026

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it shared users' personal information, including their HIV status, with third-parties. Grindr, which is the largest LGBTQ+ dating app, was sued in April 2024, accusing it of violating U.K. privacy laws by sharing sensitive data for commercial purposes such as advertising.

Tech Sep 08, 2026

Tesla Cybercab doesn’t have any manual controls — but it does have a virtual joystick

The Tesla Cybercab is notable for what it lacks, namely a steering wheel and pedal. By design, there is no way for this vehicle to be manually controlled - or so we thought. Less than a week after the Cybercab was officially launched in Austin, Texas, some riders have discovered the Cybercab's secret manual controls […]

Tech Sep 08, 2026

The White House pulls its racist Tetris clone

The White House has taken down its racist Tetris ripoff days after launching a website dedicated to "arcade games," as spotted earlier by Kotaku. The Tetris clone, called "Build the Wall," involved stacking different-sized blocks to prevent a "zombie border siege." It's not clear why the White House removed the title, though the Tetris Company […]

Marketing & SEO Sep 08, 2026

How much does AEO cost? Pricing by agency, tools, and software

How much does AEO cost? The short answer is roughly $30 a month for a monitoring tool you run yourself to over $15,000 a month for a full-service agency program that handles everything for you — with a wide middle in between.

Marketing & SEO Sep 08, 2026

How to build an AI governance framework for SEO

From hallucinated metrics to exposed customer data, here’s how to spot common AI risks and put practical guardrails in place.

Tech Sep 08, 2026

Pusheen’s first game is coming to Apple Arcade

Pusheen is getting her first game, and it will appear exclusively on Apple Arcade. Launching October 1st, Pusheen's Place lets you collect and care for more than 100 Pusheens as you play minigames and decorate rooms for Pusheenicorn, Pancake Pusheen, and other variations of the cartoon cat. In the mix of minigames, you'll "sort color […]

Tech Sep 08, 2026

JBL’s soundbar with detachable rear speakers is over $300 off

A lot of people are split between getting a nice all-in-one soundbar or spending more for an option that includes rear satellites for immersive surround sound. JBL’s Bar 700 Mark 2 system is one of the most unique options available, shipping with two modular speakers that charge when docked to the soundbar. When detached, the […]

Marketing & SEO Sep 08, 2026

Why growing restaurant chains win at local search and AI visibility by SOCi

Research finds a measurable digital visibility gap between expanding and shrinking restaurant chains across search, reviews, social, and AI.

Ready to build a better digital experience?

We create modern multilingual websites, integrate external services and automate content workflows for growing businesses.

Let’s discuss your project