MAL-2026-13652 Malicious code in sme-rko-finance-front-operations-widget-models (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ade51039ea665ab18df8b84fe421e04802f8f5830983e37064b937cb14509a On require of the package, platform.js and lib/telemetry.js run a bootstrap that selects a platform-specific asset, fetches an opaque binary from one...

Malicious code in sme-rko-finance-front-operations-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26817ccf57c03ae447f3181ec0a18c3cf5a2bcd09da40cd8aaa3fa56446ab21 On require/import, index.js loads./bootstrap and re-exports./lib/telemetry, both of which execute a download-and-execute dropper. bootstrap.js...

MAL-2026-13505 Malicious code in dolyame-ui-iconloaderhoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812cef02743987901661dc22ace6c19fee82977c4bb73b05ee046698ad603932 On require of the package's main entry, [email protected] executes two dropper paths that fetch platform-specific binaries from hardcod...

Malicious code in bigops-tcrm-permissions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20b19aa6d3666cf99d03011aefd683f0d560b45dac6f27c2915dd68dd95bc0d On require of bigops-tcrm-permissions, index.js loads runtime.js which fetches a platform-specific binary from hardcoded Cloudflare Workers hosts...

MAL-2026-13088 Malicious code in boxy-test-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ce2597c942a6017ba1aad05cadffba71e6673f8ae9298ef589493e3c4e5ad3 On require'boxy-test-block', index.js loads compat.js which reconstructs attacker-controlled destination hosts via string-split obfuscation...