Malicious code in dolyame-ui-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f91ac3c4278628875a5c009c515bcdb5fbc8b885eb32dff56e4367c5babf66 On require, index.js loads bootstrap.js which downloads a platform-specific binary from hardcoded Cloudflare Workers endpoints hostnames assembled at...

Malicious code in dolyame-ui-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714598919807b4143a734772e690ff94aa986fb6cf61bd99026e7f7bc93f4cf2 On require of the package's main entry, loader.js runs a platform-detecting downloader that fetches an executable from obfuscated hostnames...

MAL-2026-13158 Malicious code in dolyame-ui-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714598919807b4143a734772e690ff94aa986fb6cf61bd99026e7f7bc93f4cf2 On require of the package's main entry, loader.js runs a platform-detecting downloader that fetches an executable from obfuscated hostnames...

MAL-2026-13166 Malicious code in dolyame-ui-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e3316d577d11997d6d21e26dc346cf8f3cdb986d4e61d7ac95dac0c3eda7ba On require'dolyame-ui-loader', index.js triggers shim.js which selects a platform-specific binary path, downloads a binary over HTTPS from one of...

Malicious code in dolyame-ui-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d450fda6c199002bb4eb20b3bf624e31393ae3ed30e9a36fce17507472b962 Package advertises itself as a UI notification toolkit but its main entry requires./compat.js, which on load randomly selects a destination from four...

Malicious code in dolyame-ui-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9f072ffe296e46cc8e680613ad548ddea1174c0cc481272a564c85860bfdb4 On require of dolyame-ui-list, index.js loads vendor.js which downloads a platform-specific executable from one of four hardcoded Cloudflare Workers...

MAL-2026-13165 Malicious code in dolyame-ui-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9f072ffe296e46cc8e680613ad548ddea1174c0cc481272a564c85860bfdb4 On require of dolyame-ui-list, index.js loads vendor.js which downloads a platform-specific executable from one of four hardcoded Cloudflare Workers...

Malicious code in dolyame-ui-mixins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c202a6c0c4fddf77f53b3fc786c34627b47992e1f789701121793399dce47ebd On require of dolyame-ui-mixins, index.js loads./ext, which selects a platform-specific asset path linuxx64, linuxarm64, darwin, win32 and downloads ...

MAL-2026-13168 Malicious code in dolyame-ui-mixins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c202a6c0c4fddf77f53b3fc786c34627b47992e1f789701121793399dce47ebd On require of dolyame-ui-mixins, index.js loads./ext, which selects a platform-specific asset path linuxx64, linuxarm64, darwin, win32 and downloads ...

MAL-2026-13179 Malicious code in dolyame-ui-react-version-switch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee4e207fd01bae956d7fe084377ecea438f81774ea01ca6b02a50c1962c6cca Package advertises itself as a React UI helper but its index.js unconditionally requires./vendor at load time. vendor.js selects a platform-specific...

Malicious code in dolyame-ui-popup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b05e7a5637334bae528a1971c767adea5eba27b6c1386f778f6a5f54ea5ff18 On require'dolyame-ui-popup', index.js loads helpers.js which immediately fetches a platform-specific binary from string-split Cloudflare Workers...

MAL-2026-13175 Malicious code in dolyame-ui-popup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b05e7a5637334bae528a1971c767adea5eba27b6c1386f778f6a5f54ea5ff18 On require'dolyame-ui-popup', index.js loads helpers.js which immediately fetches a platform-specific binary from string-split Cloudflare Workers...

MAL-2026-13177 Malicious code in dolyame-ui-radio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a775fc526a9d050f679466553ee679e1c85046f8122fd93c07efe0af0a28cd [email protected] is a dropper disguised as a UI/telemetry package. index.js unconditionally requires./adapter.js, which on module load downloa...

Malicious code in dolyame-ui-radio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a775fc526a9d050f679466553ee679e1c85046f8122fd93c07efe0af0a28cd [email protected] is a dropper disguised as a UI/telemetry package. index.js unconditionally requires./adapter.js, which on module load downloa...

Malicious code in dolyame-ui-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf459576a54fb40358c8e22e4283559ce302a6d6e2c6cd545b48ae9be4d8ccf index.js unconditionally requires./bridge on load. bridge.js assembles Cloudflare Workers hostnames oob-worker.cf100-3-.workers.dev and a DNS-TXT...

MAL-2026-13176 Malicious code in dolyame-ui-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf459576a54fb40358c8e22e4283559ce302a6d6e2c6cd545b48ae9be4d8ccf index.js unconditionally requires./bridge on load. bridge.js assembles Cloudflare Workers hostnames oob-worker.cf100-3-.workers.dev and a DNS-TXT...

MAL-2026-13172 Malicious code in dolyame-ui-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acc8dae4428c1b1cbf6ba1dc8199cdd4b07bf06aceca87a603fd34fd18834f7 On require of the package, index.js loads./polyfill.js, which immediately executes a dropper routine. The dropper assembles destination hostnames at...

MAL-2026-13178 Malicious code in dolyame-ui-react-dom-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3f53ba29324123e792649baa012f91a2a980590dea560599490d8020b6274b On require of the package's main entry, helpers.js selects a platform-specific target path, fetches an opaque binary over HTTPS from author-controlle...

MAL-2026-13182 Malicious code in dolyame-ui-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1d8b1348e86f0f476ab27b5d5cde1c6a4cfd519e74e526a82263c78a0aaf6b On require of the package, index.js loads bridge.js, which reconstructs C2 hostnames from split string fragments resolving to...

Malicious code in dolyame-ui-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1d8b1348e86f0f476ab27b5d5cde1c6a4cfd519e74e526a82263c78a0aaf6b On require of the package, index.js loads bridge.js, which reconstructs C2 hostnames from split string fragments resolving to...