A malicious npm package called imgdecode hides malware inside image files hosted on GitHub. Security researchers at SafeDep ...
The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into ...