TI Mindmap HUB
Threat Intelligence Report

MALFEX npm Malware Campaign: Three Payloads And An Adversary That Signs Their Work

๐Ÿ“… October 18, 2026 ๐Ÿ“ฐ checkmarx.com ๐Ÿ” 0 CVE(s) referenced

The self-branded MALFEX operator used eight npm packages to compromise Windows systems with RATs, credential stealers, and downloaders, amassing over 40,000 downloads while live packages and incomplete advisories left users exposed.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

๐Ÿ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

๐Ÿ“Š Visual Mindmap
๐ŸŽฏ IOC Extraction
โš”๏ธ MITRE ATT&CK TTPs
๐Ÿ“ฆ STIX 2.1 Bundle