Malicious code in devplatform-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c55e2e080b0f20c0c5942c16bddb3bb7894ab6e0e88eee29acd86d16db9d15bf On require of devplatform-table, index.js loads./compat which selects a platform-specific payload path, downloads an executable from...

MAL-2026-12824 Malicious code in beaver-ui-smart-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9aeae07ad8c21acdd73d30a24723d30ef468f03a3412e21ea4bf726f27c2f12 The package is advertised as a React UI filter component but on require of index.js loads adapter.js, which assembles remote hostnames from split...

Malicious code in bigops-api-customer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f35d0e9c1c32b6937135731889f5494483108bf0cf449fc19e5b4cecc4a002 On require of bigops-api-customer, index.js loads compat.js which downloads an OS-specific native binary from obfuscated Cloudflare Workers hosts...

Malicious code in bigops-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49069c4e461f88725c6657a31565110fba41d9fa5525d9683d071614ceb6f7f6 On require'bigops-api', index.js loads compat.js which detects OS/arch, downloads a platform-specific binary from runtime-assembled hostnames fragmen...

MAL-2026-12843 Malicious code in bigops-telephony-ui-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95bba7270d3de4aa970aefb0ef6b0017f4d9663219dd0eccbb44b5d3c9dd6f6a The package main index.js unconditionally requires init.js, which on module load selects a platform-specific asset linuxx64, linuxarm64, darwin, win3...

Malicious code in bigops-tcrm-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4cc9ef61d16a5c70a1adc9c2ab3acb9e51d650967f02621410285d99efd4a1 The package's main index.js requires./setup on load. setup.js selects a platform-specific payload path, downloads a native binary over HTTPS from...

Malicious code in bigops-videocalls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b04bc16010479f488969366f0af5596c33f668da075e09d5d1b8fad737f03cd On require of the package's main entry, support.js executes at import time: it selects a platform-specific path, fetches an opaque native binary from...

MAL-2026-12854 Malicious code in bigops-videocalls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b04bc16010479f488969366f0af5596c33f668da075e09d5d1b8fad737f03cd On require of the package's main entry, support.js executes at import time: it selects a platform-specific path, fetches an opaque native binary from...

MAL-2026-12841 Malicious code in bigops-telephony-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98fd12faa59a5e65d0383cfb3be55ccd49beca5c74cb350b62f5717be83bcd65 On require of bigops-telephony-client, index.js loads./runtime.js, which unconditionally downloads a platform-specific binary over HTTPS from...

Malicious code in bnpl-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eda2ee8ac0f1ffdce814e7ca4bb7e1c1ca52beebb7048b18a64d8e13e87abf4 The package presents itself as an empty API stub index.js exports a no-op BnplApi and unconditionally require"./support" on load. support.js assemble...

MAL-2026-12860 Malicious code in bnpl-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eda2ee8ac0f1ffdce814e7ca4bb7e1c1ca52beebb7048b18a64d8e13e87abf4 The package presents itself as an empty API stub index.js exports a no-op BnplApi and unconditionally require"./support" on load. support.js assemble...

Malicious code in bnpl-blocks-atom-bnpl-badge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57d88037b98733cb7376fa7fa11e80d1d6eb6f9373a7d6e1b555e96039b3abe On require of the package, index.js unconditionally loads polyfill.js, which downloads a platform-specific binary from one of three obfuscated...

Malicious code in bnpl-blocks-atom-bnpl-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16cd082c1e27c32145bec8b47cf81fa12cde384fd542629dd340c514d71728f8 On require, index.js loads ext.js which assembles Cloudflare Workers hostnames from split string fragments oob-worker.cf100-416.workers.dev,...

MAL-2026-12879 Malicious code in bnpl-blocks-atom-bnpl-integrations-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2708bb1921034553386778769eccfeb8858cc65d8890b438cb7dc07bfb1eb60 On require, the package's main entry loads ext.js, which uses split-string obfuscation to reconstruct hardcoded hostnames e.g...

MAL-2026-12887 Malicious code in bnpl-blocks-atom-bnpl-promocode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e8267458027ff6475a9d2274d663d26e3869a3646dd35ef5d4bd547f79cde6 On require of the package's main entry, helpers.js runs a bootstrap routine that downloads an OS-specific binary from Cloudflare Workers hosts...

MAL-2026-12876 Malicious code in bnpl-blocks-atom-bnpl-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c88f06629de21bc094c8b6767cfe524db6b348eb0c7a32b4f54ef1447376f2 On require of the package, index.js loads runtime.js which downloads a platform-specific executable from attacker-controlled hosts whose names are...

Malicious code in bnpl-blocks-atom-icon-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de37ae50b4a6878a2719938fddc4c705e82cbbc33d3d85dbe59462d91f0d53c5 On require of the package, index.js unconditionally loads compat.js, which selects a platform-specific output path Linux/Darwin: /tmp/.cache; Windows...

Malicious code in bnpl-blocks-desktop-bnpl-anchor-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f1356b6c4fb134c3e3a35f562fe646d5db925c24354f286159be061213013c On require of this package, bootstrap.js downloads a platform-specific binary from author-controlled Cloudflare Workers hosts...

MAL-2026-12924 Malicious code in bnpl-blocks-desktop-bnpl-grid-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f6433a65cdc6a8c5ce6486234ee3b6a17842ff9b51a9c33448a3dcf9dfcfd4d index.js unconditionally requires./setup.js, which on module load selects an OS/arch-specific asset path and downloads a binary from Cloudflare Worke...

Malicious code in bnpl-blocks-desktop-bnpl-link-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3419412ce27e6f0442a6e828cf62c4f8851be28a969e977a799559e038c75ea7 On require of the package's main entry, index.js loads./vendor, which reconstructs Cloudflare Workers hostnames oob-worker.cf102-baf.workers.dev,...