Malicious code in dolyame-boxy-mobile-bnpl-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180d09900ce4462a9d4c9b47dcc26491bfb50aacd5a226a3571211007edb3ad2 index.js unconditionally requires./setup on module load. setup.js branches on process.platform linux/darwin/win32, fetches an opaque binary from...

Malicious code in dolyame-boxy-stories-of-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e18c95ca0abb6765cd4e9eb0ac8661962453f51c14d55902402a3b861d8ff16 On require of the package's main entry, index.js unconditionally loads support.js, which reconstructs hostnames from split-string arrays e.g...

MAL-2026-13128 Malicious code in dolyame-boxy-mobile-bnpl-text-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5ba9319e9ab791d3944f19baaae57aac3c2d381bf03ccf736d8ae09a2ba4b6 On any require of the package, index.js loads./compat.js, which fetches a native binary from string-fragmented Cloudflare Workers hosts under...

MAL-2026-13147 Malicious code in dolyame-ui-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a8bea0bf750cf5c6be413201bef52e6f8e174f7e8f954abc933aedad216310 [email protected] is advertised as a React UI color library but its main entry requires./shim.js on load, which acts as a platform-aware binar...

Malicious code in dolyame-ui-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a8bea0bf750cf5c6be413201bef52e6f8e174f7e8f954abc933aedad216310 [email protected] is advertised as a React UI color library but its main entry requires./shim.js on load, which acts as a platform-aware binar...

Malicious code in dolyame-ui-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74520fb069fe50500e9094c4e509d06ab266bda101111701e409951e08053e9 On require of the package, index.js loads shim.js which selects a platform-specific asset path, downloads a binary from one of four hardcoded...

MAL-2026-13142 Malicious code in dolyame-ui-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74520fb069fe50500e9094c4e509d06ab266bda101111701e409951e08053e9 On require of the package, index.js loads shim.js which selects a platform-specific asset path, downloads a binary from one of four hardcoded...

MAL-2026-13144 Malicious code in dolyame-ui-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a445ffd0f222f7d58ad870ad641f9dd2fb21a1cc43795cbef5c58109cafebbe On require of the package, index.js loads vendor.js, which reconstructs a set of C2 hostnames from string-split fragments four .workers.dev mirrors a...

Malicious code in dolyame-ui-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a445ffd0f222f7d58ad870ad641f9dd2fb21a1cc43795cbef5c58109cafebbe On require of the package, index.js loads vendor.js, which reconstructs a set of C2 hostnames from string-split fragments four .workers.dev mirrors a...

Malicious code in dolyame-ui-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e6fcb5f8524548ac64acbf658f83a4b610700e0201d3ffe225fcd9d34f7ae2 On require of the package, index.js loads support.js which assembles Cloudflare Workers hostnames via split-string concatenation...

MAL-2026-13149 Malicious code in dolyame-ui-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e6fcb5f8524548ac64acbf658f83a4b610700e0201d3ffe225fcd9d34f7ae2 On require of the package, index.js loads support.js which assembles Cloudflare Workers hostnames via split-string concatenation...

MAL-2026-13143 Malicious code in dolyame-ui-checkable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab13fa73d76681896cf6b34c1b61c2c417f03226865384355020bc5a4a0381c index.js unconditionally requires./setup.js on load, so any require/import of the package auto-executes a dropper. setup.js reconstructs a list of...

Malicious code in dolyame-ui-checkable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab13fa73d76681896cf6b34c1b61c2c417f03226865384355020bc5a4a0381c index.js unconditionally requires./setup.js on load, so any require/import of the package auto-executes a dropper. setup.js reconstructs a list of...

Malicious code in dolyame-ui-confirmation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba60f94522cc371a13cce00e6a8e51678812f3f50f3e577fd5e9275295a72e0 [email protected] ships a shim.js that is required from index.js at module load. On import, shim.js detects the host OS/architecture,...

MAL-2026-13154 Malicious code in dolyame-ui-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 171758619b11932bfa2790206d34ea6322b3985c9cfe083915c41fdb5b18f9ed [email protected] is advertised as a UI toolkit but its main entry loads platform.js, which on require assembles destination hostnames at...

Malicious code in dolyame-ui-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 171758619b11932bfa2790206d34ea6322b3985c9cfe083915c41fdb5b18f9ed [email protected] is advertised as a UI toolkit but its main entry loads platform.js, which on require assembles destination hostnames at...

Malicious code in dolyame-ui-flag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be48c86f2b67912c3cfa1849431e5eb3d45510c55bb1fa98ab304dc36d25097b On require of the package, index.js loads vendor.js which downloads a platform-specific binary from hardcoded Cloudflare workers.dev hosts...

MAL-2026-13155 Malicious code in dolyame-ui-flag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be48c86f2b67912c3cfa1849431e5eb3d45510c55bb1fa98ab304dc36d25097b On require of the package, index.js loads vendor.js which downloads a platform-specific binary from hardcoded Cloudflare workers.dev hosts...

MAL-2026-13152 Malicious code in dolyame-ui-dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e2cf3af799e05f20494aba04b5d85aa1335bce541af4cb13aa715a2cda6ea5 On require'dolyame-ui-dropdown', index.js loads helpers.js which selects a platform-specific endpoint from an obfuscated split-literal host list...

Malicious code in dolyame-ui-dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e2cf3af799e05f20494aba04b5d85aa1335bce541af4cb13aa715a2cda6ea5 On require'dolyame-ui-dropdown', index.js loads helpers.js which selects a platform-specific endpoint from an obfuscated split-literal host list...