function-color

Named by 4 kept items in this workspace.

2 items name it under affected products, 1 under classification.key entities and 1 under threat actors.

Search every workspace for function-color. It matches the name as written, so it can find other things that share it.

The items that name it 4

Benjamin👨‍💻 (@Hislordship_9) on X
threadas threat actors2026-10-26It is written here as function-color (known malicious npm package, installed via a malicious "project-tools" MCP server entry).
known malicious npm package, installed via a malicious "project-tools" MCP server entry
Malicious npm Campaign “MALFEX” Delivers RAT and Stealer via Eight Packages with 40,000+ Downloads
articleas affected products2026-10-08It is written here as function-color (npm package).
Still live and installable; delivers downloader payload
MALFEX npm Malware Campaign: Three Payloads And An Adversary That Signs Their Work
writeupas affected products2026-10-05It is written here as function-color (npm package).
Malicious wrapper with no payload of its own, installs function-flag as a dependency; still installable as of 29 September 2026; no advisory
MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data
articleas classification.key entities2026-09-30

All threat actors in this workspace.