Immediately imports `imgbundle`, a dependency identified as part of the malicious OverRun campaign, causing its top-level code to execute when this module is loaded. The module otherwise exposes a no-op `load` function and attempts to load a bundled native binary, consistent with a loader/stager-style package.
This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
Please refer to www.npmjs.com/advisories?search=imgdecode for more information.
FAQs
security holding package
The npm package imgdecode receives a total of 212 weekly downloads. As such, imgdecode popularity was classified as not popular.
We found that imgdecode demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.
