Cyber Attacks
Organisations face persistent threat from imgdecode npm package still hosting encrypted shellcode loader
The malicious imgdecode package downloads encrypted payloads from GitHub and injects them into a new process on Windows systems.
npm
Everything Sandbox Desk has reported about npm: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Node.js Library Flaw Lets Attackers Run OS Commands via Archive Paths
An unpatched command injection flaw in the @mborne/extract npm package allows remote attackers to execute arbitrary system commands with Node.js privileges.
Vulnerabilities
Organisations urged to patch fast-jwt as CVE-2026-107723 enables token validation bypass via array payloads
A high-severity bug in the fast-jwt library allows attackers to skip expiry and issuer checks by submitting tokens with array payloads.