# Malicious npm Package 'imgdecode' Conceals Shellcode Loader in Windows Addon

Researchers flagged the npm package "imgdecode," which ships a Windows native addon that hides a shellcode loader, according to The Hacker News. The package abuses npm's install-time native compilation to run malicious code on developer machines, a technique that can slip past audits focused on JavaScript. It highlights the continuing risk of supply chain attacks targeting open-source package registries.

**Importance:** 4/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.html) — Sat, 17 Oct 2026 16:41:56 +0530