Immediately imports `imgbundle`, a dependency identified as part of the malicious OverRun campaign, causing its top-level code to execute when this module is loaded. The module otherwise exposes a no-op `load` function and attempts to load a bundled native binary, consistent with a loader/stager-style package.
Native image buffer decoder for Node.js. Processes packed image assets at native speed for build pipelines.
npm install imgdecode
const { exec } = require('imgdecode');
await exec('./tool.exe', ['--flag']);
MIT
FAQs
security holding package
The npm package imgdecode receives a total of 687 weekly downloads. As such, imgdecode popularity was classified as not popular.
We found that imgdecode demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.
Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.