Browsing Tag
npm Malware
1 post
Malicious npm packages, dependency attacks, registry abuse, and related developer security incidents.
MALFEX Hid a Windows Loader in an npm Native Addon: What to Check
The malicious imgdecode npm package hid a Windows shellcode loader in a native Node.js addon. Here is how it evaded common checks and what defenders should inspect.
