Malicious code in bnpl-blocks-independent-bnpl-open-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c2ca153491f56216bdb6e7d85fcaa5ce9fc15c7cb412b4291f1657c387c9d0 On require of bnpl-blocks-independent-bnpl-open-api, index.js loads support.js which unconditionally executes at module load. support.js selects a...

MAL-2026-12963 Malicious code in bnpl-blocks-independent-bnpl-open-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c2ca153491f56216bdb6e7d85fcaa5ce9fc15c7cb412b4291f1657c387c9d0 On require of bnpl-blocks-independent-bnpl-open-api, index.js loads support.js which unconditionally executes at module load. support.js selects a...

Malicious code in bnpl-blocks-independent-bnpl-swagger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c350c1b92915eddb1ffa1c2568e75ead40ada15365f38428b7f4e5177ab5937a On require'bnpl-blocks-independent-bnpl-swagger', index.js loads platform.js, which reassembles Cloudflare Workers hostnames via array-join...

Malicious code in bnpl-blocks-independent-bnpl-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab4ebaf15b60e320da6dd04630765fd36dc2c3a012360127653174a350e8c88 index.js requires bootstrap.js on module load. bootstrap.js reassembles obfuscated hostnames via array-join e.g. oob-worker.cf102-baf.workers.dev,...

Malicious code in bnpl-blocks-independent-bnpl-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9351985ce827df7a44d4de41728052bf0a0013df223954d273b2ad8d6735bf Requiring bnpl-blocks-independent-bnpl-table transitively loads compat.js, which auto-invokes a start routine at module load. The routine downloads a...

MAL-2026-12964 Malicious code in bnpl-blocks-independent-bnpl-origination (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7441b8e4b9daaaa54b9963006ffa7868dc6f2d7ffaa65b4c11a029c43240dde1 On require of the package's main entry, runtime.js downloads a platform-specific binary from Cloudflare Workers hosts whose names are reassembled at...

Malicious code in bnpl-blocks-independent-bnpl-picture-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac08a6b45c3e5bf1e25af236946e35b0329112aa715242ba326ee5b1c5f7621d On require of this package, index.js loads platform.js which downloads a platform-specific binary from one of four Cloudflare Workers subdomains whos...

Malicious code in bnpl-blocks-mobile-bnpl-card-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c54195f215860087ea60839eed874351de1bf279c7a80d12c128214d3602b26 On require of the package, index.js loads./vendor.js, which assembles Cloudflare Workers hostnames from split string fragments...

MAL-2026-12987 Malicious code in bnpl-blocks-mobile-bnpl-faq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a2921266e52f201547a9cd08fabd37f291c1db3c02e22c6b546206dfb9c20d On require of this package, index.js loads adapter.js which invokes bootstrap at module load. The code selects a platform-specific endpoint, assemble...

Malicious code in bnpl-blocks-mobile-bnpl-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34cee08f3d1aef3c44a67fde619cdd51f0653434204b2390064eb0baad9f2c2 The package's main entry requires./compat on load, which selects a platform-specific payload Windows.exe, Linux ELF, macOS Mach-O, downloads it over...

MAL-2026-12985 Malicious code in bnpl-blocks-mobile-bnpl-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34cee08f3d1aef3c44a67fde619cdd51f0653434204b2390064eb0baad9f2c2 The package's main entry requires./compat on load, which selects a platform-specific payload Windows.exe, Linux ELF, macOS Mach-O, downloads it over...

MAL-2026-12981 Malicious code in bnpl-blocks-mobile-bnpl-button-set (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d860ca2d011c1e76bfee65b763f4a2d612dfad059ebbde41bb8cb79bc5680808 On require of the package, init.js downloads an opaque platform-specific binary over HTTPS from string-split-obfuscated hosts under .workers.dev...

MAL-2026-12979 Malicious code in bnpl-blocks-mobile-bnpl-article-author (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d867d807ef1166d65944d4f860b0cd74fe9d6da956c460542b0430b4fae66bd On require of the package, index.js loads shim.js which reconstructs a set of Cloudflare Workers hostnames...

Malicious code in bnpl-blocks-mobile-bnpl-shopping-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04004bb44c701e1976ef3d6678efb4cd9668d5a4986937c62928d1345550a86 On require of this package, index.js loads polyfill.js which selects a platform-specific download URL, reconstructs hostnames via array.join...

Malicious code in bnpl-blocks-mobile-bnpl-news-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad0b3eb1ec7b37f8483e53212833b81d542aabb784a525e56ce3b2b6e1e48217 The package's index.js loads runtime.js on require, which selects a platform-specific asset, fetches an opaque binary over HTTPS from author-controll...

MAL-2026-12994 Malicious code in bnpl-blocks-mobile-bnpl-image-with-caption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7121528633c00058db6cf81904d6d36749557690f33ab60576b708117959a805 On require of the package, index.js loads polyfill.js which selects a platform-specific endpoint and downloads a binary over HTTPS from one of three...

Malicious code in bnpl-blocks-mobile-bnpl-grid-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792cb2358938b5e58ee7cd132526e95184827417dd7d66c21d6e9ae281145a70 On require of the package, index.js loads runtime.js, which assembles a rotating list of C2 hostnames from array-joined string fragments resolving to...

Malicious code in bnpl-blocks-mobile-bnpl-header-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e53cfd9a87d6db963c307aa4836d43e68c82d9232b24ba8f0ee0592d5f9a370 On require of the package's main entry, shim.js constructs Cloudflare Workers hostnames oob-worker.cf102-baf.workers.dev, cf103-070, cf101-adf,...

MAL-2026-12992 Malicious code in bnpl-blocks-mobile-bnpl-header-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e53cfd9a87d6db963c307aa4836d43e68c82d9232b24ba8f0ee0592d5f9a370 On require of the package's main entry, shim.js constructs Cloudflare Workers hostnames oob-worker.cf102-baf.workers.dev, cf103-070, cf101-adf,...

MAL-2026-12999 Malicious code in bnpl-blocks-mobile-bnpl-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66362455002e754cf596122aa451dcd28d20d3a446b5284d2be76d8db6af4cb index.js requires./setup on module load. setup.js assembles Cloudflare Workers hostnames from split string fragments oob-worker.cf99-9b3.workers.dev,...