MAL-2026-12162 Malicious code in bigops-customer-processing-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d2fe146d4919092aae053b82b0caacff3789c10e63358f880fa5ab4590b3d2 On require of this package, index.js loads support.js which unconditionally invokes setup. setup assembles C2 hostnames via.join'' from fragmented...

MAL-2026-12038 Malicious code in bigops-customer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59163c2270e2c84a960164463cb31d73a8db2e80e484d7d58d44ed2d32d36f0a The package's main entry requires ./ext, which on load downloads a platform-specific binary from hardcoded Cloudflare Workers hosts...

Malicious Package

Overview bigops-customer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...