Security News MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon TheHackerNews Daniel Bender 17 Oct 2026 Share The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into dllhost.exe.