MALFEX: Eight Malicious npm Packages, 40,767 Downloads, and an ASCII Art Font That Drops a RAT
No Comments on MALFEX: Eight Malicious npm Packages, 40,767 Downloads, and an ASCII Art Font That Drops a RAT
A lone, Portuguese-speaking operator has been seeding npm with malware since 2023, and three of the eight flagged packages are reportedly still live. Here's how the MALFEX campaign works and what I'd check in my own projects today.