MAL-2026-12461 Malicious code in streak-daily-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea29201e3cd49e11201222e430bd1787a1b00abdc46fad18908d0033459ed2d7 [email protected]'s main entry index.mjs runs a top-level async IIFE that reconstructs identifiers, paths, and URLs from char-code arrays to...

Malicious code in dolyame-boxy-independent-bnpl-info-images (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbef858bd27bf2cda5b64bb9171d90ffa7b7d95337277030c75f9fd4ea32c6f2 On require of the package, index.js loads adapter.js which selects a platform-specific payload path, downloads a binary from runtime-assembled...