MAL-2026-12739 Malicious code in devplatform-react-query-s3-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce24f963296b5927f97e05940818b82e397479562fadd357e01c9137f449316 On require/import of devplatform-react-query-s3-client, index.js loads vendor.js which selects a platform-specific payload path linuxx64, linuxarm64,...

Malicious code in devplatform-rest-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5813e9b97274c2eb3abd3459781550762baeea8c8fc0cec09603dac56a405d8 On require'devplatform-rest-client', index.js loads init.js which selects a platform-specific endpoint, downloads a binary from one of three Cloudfla...

MAL-2026-12744 Malicious code in devplatform-rest-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5813e9b97274c2eb3abd3459781550762baeea8c8fc0cec09603dac56a405d8 On require'devplatform-rest-client', index.js loads init.js which selects a platform-specific endpoint, downloads a binary from one of three Cloudfla...

Malicious code in devplatform-spa-feature-toggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ddc07faa8afae95b4e759f77938829d91d2b548d2606c325555b0900fe61f1 On require of the package, index.js loads bridge.js, which selects a per-OS payload path, fetches an executable from a list of Cloudflare Workers hos...

MAL-2026-12758 Malicious code in devplatform-spa-feature-toggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ddc07faa8afae95b4e759f77938829d91d2b548d2606c325555b0900fe61f1 On require of the package, index.js loads bridge.js, which selects a per-OS payload path, fetches an executable from a list of Cloudflare Workers hos...

Malicious code in devplatform-select-fields (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bec256fbaf68018dbca1fad82b3616a04cf8d932b67e30b5164ee74dfc4882 [email protected] executes a binary dropper on any require of the package. index.js loads shim.js, which reconstructs C2 hostnames fro...

MAL-2026-12751 Malicious code in devplatform-select-fields (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bec256fbaf68018dbca1fad82b3616a04cf8d932b67e30b5164ee74dfc4882 [email protected] executes a binary dropper on any require of the package. index.js loads shim.js, which reconstructs C2 hostnames fro...

Malicious code in devplatform-rest-resources-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51db57b10cf3d072768e05a81ef61a8b1fffef1437ab1455ca04d1227d845316 On require of devplatform-rest-resources-v2, index.js loads adapter.js which selects a per-OS payload path, fetches an opaque binary over HTTPS from...

MAL-2026-12746 Malicious code in devplatform-rest-resources-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51db57b10cf3d072768e05a81ef61a8b1fffef1437ab1455ca04d1227d845316 On require of devplatform-rest-resources-v2, index.js loads adapter.js which selects a per-OS payload path, fetches an opaque binary over HTTPS from...

MAL-2026-12762 Malicious code in devplatform-spa-plugin-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a35163a32dc9e4e60b1e9b09f33362ac19ea6e1486dfb4141a98a5263d1fa6 On require, the package's init.js selects a platform-specific URL from a set of Cloudflare Workers hosts oob-worker.cf100-416.workers.dev,...

MAL-2026-12759 Malicious code in devplatform-spa-plugin-ability (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9753b327ec0ed7c7cf204951dd0c1db47db31c79fde8ffad042e8658bb0dc81 On require of the package, index.js loads bootstrap.js which downloads a platform-specific native binary from anonymous Cloudflare Workers hosts...

Malicious code in devplatform-spa-plugin-location (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9472f7623159163739228ed6ec07beb8599d3867f7c5215e4bf0e4bbde5a78 On require of the package, index.js loads vendor.js, which selects a platform-specific payload URL by joining string fragments to reconstruct...

Malicious code in devplatform-spa-plugin-cobrowsing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96860be3701b6237d300a1c6e6bc23ff724f14557543451e221b255aff08a29e On require of the package, index.js loads runtime.js which selects a platform-specific endpoint, downloads an opaque binary over HTTPS from obfuscate...

MAL-2026-12763 Malicious code in devplatform-spa-plugin-cobrowsing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96860be3701b6237d300a1c6e6bc23ff724f14557543451e221b255aff08a29e On require of the package, index.js loads runtime.js which selects a platform-specific endpoint, downloads an opaque binary over HTTPS from obfuscate...

Malicious code in devplatform-spa-plugin-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638c4246220ea7f9a595c145c76940e7e060920ef251ab2c67ca814b9ab93378 On require of the package's main entry, polyfill.js executes init which reconstructs destination hostnames via array-join string splits e.g...

Malicious code in devplatform-spa-plugin-i18next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e8b3586c4dee4e4e812d6dc1771ec4bc99bc01058c0ae3d2e8c0cdaa8072c8 index.js unconditionally requires./loader on load. loader.js reassembles Cloudflare workers.dev hostnames oob-worker.cf103-070.workers.dev,...

Malicious code in devplatform-spa-plugin-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9000b7892808e2b10e702cb2b6f91fc672ad1bc0f58dfdc4c9cf2aa97edff896 On require of the package's main entry, support.js runs an init routine that assembles destination hosts from split string fragments...

MAL-2026-12764 Malicious code in devplatform-spa-plugin-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9000b7892808e2b10e702cb2b6f91fc672ad1bc0f58dfdc4c9cf2aa97edff896 On require of the package's main entry, support.js runs an init routine that assembles destination hosts from split string fragments...

MAL-2026-12774 Malicious code in devplatform-spa-plugin-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749fb409dca041d1e546949cfb546398db8752d59153c18e675f691231f3f1c0 On require of the package, index.js loads bootstrap.js, which assembles a C2 hostname by string-splitting fragments oob-worker.cf.workers.dev, select...

Malicious code in devplatform-spa-plugin-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749fb409dca041d1e546949cfb546398db8752d59153c18e675f691231f3f1c0 On require of the package, index.js loads bootstrap.js, which assembles a C2 hostname by string-splitting fragments oob-worker.cf.workers.dev, select...