🧰 native-runner

The items that name it 2

• Malicious npm Campaign “MALFEX” Delivers RAT and Stealer via Eight Packages with 40,000+ Downloads
  article2026-10-08It is written here as native-runner (npm package).

  Confirmed malicious across all published versions

• MALFEX npm Malware Campaign: Three Payloads And An Adversary That Signs Their Work
  writeup2026-10-05It is written here as native-runner (npm package).

  Malicious wrapper pulling in img-to-native; seized by npm