Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

MALFEX npm Malware Hides Executables in PNG Files to Infect Windows Developers

Cybersecurity NewsOctober 8, 20265 min read

A long-running npm malware campaign called MALFEX is targeting Windows developers with remote access tools, data stealers, and hidden downloaders. The attack uses eight malicious packages and three separate delivery paths, including a Windows executable disguised as a PNG and an encrypted program hidden after real image data. The operator has published packages since August […] The post MALFEX npm Malware Hides Executables in PNG Files to Infect Windows Developers appeared first on Cyber Security News.

A long-running npm malware campaign called MALFEX is targeting Windows developers with remote access tools, data stealers, and hidden downloaders. The attack uses eight malicious packages and three separate delivery paths, including a Windows executable disguised as a PNG and an encrypted program hidden after real image data. The operator has published packages since August 2023. Across the eight malicious packages, npm recorded 40,767 downloads by October 1, 2026, including 3,017 during the previous week. Those numbers show package reach, not confirmed infections: downloads can include repeat installs, dependencies, and systems that cannot run the Windows payloads. Checkmarx researchers identified the…

Excerpt shown under the publisher's RSS terms · 101 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article