🧰 function-color

The items that name it 2

• Malicious npm Campaign “MALFEX” Delivers RAT and Stealer via Eight Packages with 40,000+ Downloads
  article2026-10-08It is written here as function-color (npm package).

  Still live and installable; delivers downloader payload

• MALFEX npm Malware Campaign: Three Payloads And An Adversary That Signs Their Work
  writeup2026-10-05It is written here as function-color (npm package).

  Malicious wrapper with no payload of its own, installs function-flag as a dependency; still installable as of 29 September 2026; no advisory