MAL-2026-13511 Malicious code in dolyame-ui-stateutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcb488491701865d9106e75e576785ff3b4f1d9687e456eb69f1ff69d8a393f On require/import, index.js loads loader.js which fetches an opaque platform-specific binary from one of three obfuscated Cloudflare Workers endpoint...

Malicious code in checkout-input-email-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f845143d537f4590a200285bce69801a27e5c73a1080212bae23c392c43841 On require, bridge.js assembles attacker-controlled hostnames from split-string fragments oob-worker.cf103-070.workers.dev,...