🧰 function-flag

The items that name it 3

• Malicious npm Campaign “MALFEX” Delivers RAT and Stealer via Eight Packages with 40,000+ Downloads
  articleas affected products2026-10-08It is written here as function-flag (npm package).

  37,419 downloads alone; malicious since July 2025; continuously malicious for 14 months without triggering an npm advisory; still live and installable; delivers downloader payload

• MALFEX npm Malware Campaign: Three Payloads And An Adversary That Signs Their Work
  writeupas affected products2026-10-05It is written here as function-flag (npm package).

  Malicious downloader, versions including 1.7.3 (current latest, malicious), 4.0.0 (malicious), 3.0.0 (malicious, URL truncated), 2.3.4 (not malicious); still installable as of 29 September 2026; no advisory; 37,419 of 40,767 total campaign downloads

• MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data
  articleas classification.key entities2026-09-30