MAL-2026-12987 Malicious code in bnpl-blocks-mobile-bnpl-faq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a2921266e52f201547a9cd08fabd37f291c1db3c02e22c6b546206dfb9c20d On require of this package, index.js loads adapter.js which invokes bootstrap at module load. The code selects a platform-specific endpoint, assemble...

MAL-2026-12689 Malicious code in delivery-ci-validate-tinkoff-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c2b95894675a32af7552c62bb8cd49bbd1d69f64d2685118ed2fede54c0b1a0 The package presents itself as a CI validation helper but index.js calls require'./adapter' on import, causing adapter.js to run automatically...

Malicious code in devplatform-react-micro-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38577b4e463996b1df19599f016c8ad16ebb36d8650effd666c93d844364c475 [email protected] is a lure package whose main entry auto-loads adapter.js on require. adapter.js selects a platform-specific...