MALFEX npm Campaign and TensorLake 0.5.144 Put Installs at Risk

What changed · following since Oct 8 Oct 18 — MALFEX package imgdecode, uploaded September 30, 2026, had 979 downloads and used a Windows DLL to decrypt GitHub shellcode and inject it into dllhost.exe.

Two npm supply-chain paths now cover both a long-running malicious-package campaign and a compromised AI SDK, with risks ranging from payload delivery to credential theft. MALFEX’s native-addon technique shows that a dependency can trigger concealed Windows execution, while TensorLake 0.5.144 keeps exposure centered on downstream users and credentials.

• The MALFEX activity is attributed to an actor that published 12 packages since August 2023; eight have been flagged as malicious.
• The eight malicious packages were downloaded 40,767 times and used three infection pathways against Windows systems, including Overlord RAT, a Node.js stealer and a downloader.
• The MALFEX-linked imgdecode package used a compiled Node.js addon and Windows DLL to retrieve encrypted shellcode from GitHub and inject it into dllhost.exe.
• TensorLake npm SDK version 0.5.144 was compromised in a ChainDrop/Shai-Hulud attack that delivered credential-stealing malware.
• The compromised tensorlake package has approximately 12,000 weekly downloads and more than 1,000 GitHub stars.
• Caveat: The impact of the TensorLake compromise remains unknown.

Bottom line If you build or run npm software, review installs and lockfiles now; investigate TensorLake 0.5.144 and MALFEX package use, look for unauthorized execution, and rotate exposed credentials.