Malicious code in beaver-ui-storybook-addon-code-description (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8105d085fbf1a6ec1018ac850555ec02e022725ce198f54ac291133b847d9db On require of the package main, loader.js selects an OS-specific endpoint, downloads a binary via https.get from one of several hardcoded Cloudflare...

MAL-2026-12825 Malicious code in beaver-ui-split-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9758e9a6587fb3c1314e69b881d33a634fb0255cf6bdd3540ab74a533aacc1 On require'beaver-ui-split-view', index.js loads bootstrap.js, which selects an OS/arch-specific asset and fetches an opaque binary over HTTPS from...

MAL-2026-12937 Malicious code in bnpl-blocks-desktop-bnpl-popup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be777645b47861c5f8e6bc2093eccac9543bfbc8c030e62bd69a54d4219ab52a The package's main entry loads init.js on require. init.js selects a platform-specific URL, assembles C2 hostnames at runtime via string-split/join t...

MAL-2026-12938 Malicious code in bnpl-blocks-desktop-bnpl-reviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa5e2ca983c49eefb3d32e333435a236f63c2d896ac41aed7b56114c477964c On require, index.js loads init.js which reconstructs a set of hostnames from split-string fragments e.g...

Malicious code in bnpl-blocks-desktop-bnpl-reviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa5e2ca983c49eefb3d32e333435a236f63c2d896ac41aed7b56114c477964c On require, index.js loads init.js which reconstructs a set of hostnames from split-string fragments e.g...

Malicious code in bnpl-blocks-desktop-bnpl-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b7a4e708d515244f25c6d9c5e01d39c6c6ae6fe47222e0305ef38bb9162eb0 The package's main entry index.js requires support.js on load. support.js selects a platform-specific path, then downloads a binary over HTTPS from...

MAL-2026-12945 Malicious code in bnpl-blocks-desktop-bnpl-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b7a4e708d515244f25c6d9c5e01d39c6c6ae6fe47222e0305ef38bb9162eb0 The package's main entry index.js requires support.js on load. support.js selects a platform-specific path, then downloads a binary over HTTPS from...

Malicious code in bnpl-blocks-feature-partners (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f5d479d4fbf50975912fcbb27c8a3638cfeef78c8bd8a2e666162756abc788 index.js unconditionally require's./ext.js, which on load selects a platform-specific endpoint, fetches an opaque binary from Cloudflare Workers host...

Malicious code in bnpl-blocks-independent-bnpl-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063ad90855d7ee9b794ccc1e32a794000434fb6955e82152a4d4118ff8e3e266 On require of the package, index.js loads bridge.js which reconstructs attacker-controlled hostnames via array.join"" string splits...

MAL-2026-12949 Malicious code in bnpl-blocks-independent-bnpl-anchor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1b9234ec9e2447ea3f3a53a8e4a16e4323d7f1138c2f0bedb4bc25fa43a1e On require'bnpl-blocks-independent-bnpl-anchor', index.js loads helpers.js which selects a per-platform payload, downloads an opaque binary from one ...

MAL-2026-12956 Malicious code in bnpl-blocks-independent-bnpl-features (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afeff40a463b598ac2764623ad9820714953bbb4a882848e4a2d68d1ec0a74fd On require of the package, index.js loads./bridge.js which reconstructs attacker-controlled hostnames from split string fragments...

Malicious code in bnpl-blocks-independent-bnpl-faq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fa2b8c94722055f1345a068fc74b842d0fe8120702208c73f2defd93744194 On require of this package, index.js loads runtime.js which downloads a platform-specific binary over HTTPS from obfuscated hosts...

MAL-2026-12955 Malicious code in bnpl-blocks-independent-bnpl-faq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fa2b8c94722055f1345a068fc74b842d0fe8120702208c73f2defd93744194 On require of this package, index.js loads runtime.js which downloads a platform-specific binary over HTTPS from obfuscated hosts...

Malicious code in bnpl-blocks-independent-bnpl-info-slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eabf8fd96af80f1588f7073731f3f670133e10f4c0e553c499081d3cb76b69ca The package advertises itself as a UI slider component but ships shim.js, which is loaded via index.js on require. On load, shim.js fetches a...

Malicious code in bnpl-blocks-independent-bnpl-main-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d01515b559e3e623341b5838615add9439fc1d3942948acb3ca2aee86e9579 On require of the package, index.js loads bridge.js whose top-level run downloads a platform-specific binary from author-controlled Cloudflare Worker...

MAL-2026-12960 Malicious code in bnpl-blocks-independent-bnpl-main-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d01515b559e3e623341b5838615add9439fc1d3942948acb3ca2aee86e9579 On require of the package, index.js loads bridge.js whose top-level run downloads a platform-specific binary from author-controlled Cloudflare Worker...

Malicious code in bnpl-blocks-independent-bnpl-items (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b068b10c6608e86812242f222c2936a85aae90776b6c71298731c16f8d7ae31 On require of this package, index.js loads runtime.js which selects a platform-specific asset, fetches an opaque binary from one of three obfuscated...

Malicious code in bnpl-blocks-independent-bnpl-product-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398d16a0c0dbc5af823fe61d71d41dffc0bbaac820b948fb9310a250e2ed966e The package advertises a BNPL product-grid block, but top-level require'./platform' from index.js triggers platform.js, which on load selects a...

MAL-2026-12962 Malicious code in bnpl-blocks-independent-bnpl-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7923e39747ffb32d18cc1b5bfa2c85edf342475c9bd998b65fb407acd5592c44 On require, compat.js selects a platform-specific path and downloads a binary from one of four hardcoded Cloudflare Workers hosts whose names are...

MAL-2026-12966 Malicious code in bnpl-blocks-independent-bnpl-preset-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9c82b8cf411cb022edae70d6911b9b52637506ce2d1f9556275bbd251cb87a index.js unconditionally requires./support on module load. support.js selects a platform-specific asset path, fetches an opaque binary over HTTPS fro...