Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
2 / 6 results
highbug_reportVulnerabilitybug_reportVulnerability
Malicious npm package 'imgdecode' delivers shellcode loader on Windows
npm package 'imgdecode' versions 1.0.0 through 1.0.3, published by user 'malfexteste8'. Part of broader MALFEX campaign targeting Windows systems via npm supply chain. Downloaded 979 times. Package was still available on npm as of October 17, 2026.
npm17 Oct · 09:11 UTC
highbug_reportVulnerabilitybug_reportVulnerability
MALFEX campaign: 8 malicious npm packages deliver Overlord RAT, 40K+ downloads
npm ecosystem; 8 malicious packages (tlxbnhd, tldriver, mxdriver, img-to-native, native-runner, function-flag, function-color, cdn-img-fetch) with 40,767 total downloads since August 2023.
npm7 Oct · 15:43 UTC