MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

The feed reports multiple active or critical cybersecurity threats, including supply-chain compromise, zero-day exploitation, credential abuse, phishing, malware deployment, and critical remote-code-execution vulnerabilities. Highest-priority items include China-linked exploitation of BeyondTrust Remote Support, critical Linux guest-to-host memory exposure, actively exploited PAN-OS RCE, Langflow authenticated RCE exploitation, compromised AOMEI update infrastructure, and malicious npm and GitHub campaigns.