MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

News

Technology & Digital Insights

The latest news, trends and insights on technology, artificial intelligence, cybersecurity, marketing and the digital world.

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of

The Hacker News · October 17, 2026

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary code as the operating-system user running the database server. The flaw, tracked as CVE-2026-6471 (CVSS score: 7.2), has been present since logical decoding was introduced in PostgreSQL 9.4 in 2014. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are

Learning Sep 04, 2026

How to Build a Scholarship Research MCP Server with Node.js, Express, and MongoDB

Scholarship hunting is a research job, not a single search box. You filter awards by field, GPA, citizenship, and deadline. You keep a shortlist. You write notes about essays and recommenders. Then yo

Security Sep 04, 2026

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAProxy load balancers of two South Korean organizations, where it intercepted web traffic and served altered pages to selected visitors. The attackers named the implant ted in debug strings left in the binary. It is not a HAProxy vulnerability, and installing it requires code execution on the host and

Learning Sep 04, 2026

Taylor disabled GitHub Issues on most Laravel open-source packages.

If you hit a bug, describe it to a coding agent and open a PR. Even if the code isn't great, that's fine - code can be iterated on. The PR still documents the problem, and a proper fix can follow.

Learning Sep 04, 2026

How AI Receptionists Work: The Architecture Behind AI Phone Agents

An AI receptionist may sound simple from the outside: a caller speaks, the system responds, and the conversation continues until the caller gets an answer or reaches a person. Behind that conversation

Marketing & SEO Sep 04, 2026

Google rolls out AI-powered AdSense Help guide to all English Help Center traffic

Google’s AI-powered AdSense Help guide answers publisher questions and helps with onboarding and troubleshooting.

Marketing & SEO Sep 04, 2026

Google opens YouTube personalized ads to alcohol advertisers

Google will allow personalized alcohol advertising on YouTube starting Oct. 30, in markets where local laws permit.

Tech Sep 04, 2026

Audacity 4 is a complete revamp of the ‘world’s most popular’ audio editor

Audacity 4 has been in the works for some time, and had its own mini controversy last year when an unfortunate redesigned logo started making the rounds. The final version of the new icon isn't nearly as bad as the early rendition that was circulating last October. But more importantly, all the promised improvements to […]

Marketing & SEO Sep 04, 2026

OpenAI expands ChatGPT ads globally and builds out its ad stack

OpenAI has expanded ChatGPT Ads, alongside new tools for audience targeting, conversion measurement, and reporting

Learning Sep 04, 2026

How to Use Discord with a Screen Reader: A Quick Guide

Discord is one of those technologies that came out of nowhere several years ago and is now everywhere. A huge variety of servers around all sorts of communities, efforts, and initiatives have been pop

Marketing & SEO Sep 04, 2026

Semrush is bringing AI visibility under the Spotlight

This October, Semrush, an Adobe company, will bring its Spotlight conference to London to discuss how AI is changing the way brands get discovered and why marketers need to rethink their visibility for the AI age.

Learning Sep 04, 2026

How AI Is Changing Patching and What Devs Need to Know About Exposure Management

When a vulnerability scanner reports 23 vulnerabilities in your application, of which 4 are critical, 7 are high, and the remaining 12 are medium, at first glance the answer seems clear: start patchin

Ready to build a better digital experience?

We create modern multilingual websites, integrate external services and automate content workflows for growing businesses.

Let’s discuss your project