Malicious code in bigops-telephony-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98fd12faa59a5e65d0383cfb3be55ccd49beca5c74cb350b62f5717be83bcd65 On require of bigops-telephony-client, index.js loads./runtime.js, which unconditionally downloads a platform-specific binary over HTTPS from...

MAL-2026-12852 Malicious code in bigops-umf-statist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da63079fe1017b1a4ade225e41fbb7479ab0a247b235d62b252470ff9f07e1d7 On require'bigops-umf-statist', index.js loads runtime.js which selects a platform-specific endpoint, downloads a binary over HTTPS from...

MAL-2026-12855 Malicious code in bigops-watchdog-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7bfa2b0d9464df6662fddb4e969b42ef35465f2c70ba39943ac3fb0265aa781 On require of the package, index.js loads vendor.js which selects a platform-specific URL, downloads an opaque binary from one of several Cloudflare...

MAL-2026-12861 Malicious code in bnpl-blocks-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b74429ec0cf706ca11dded285a5b89933db6cbbf2b38905c0b0549be62a8f1 On require'bnpl-blocks-analytics', index.js loads compat.js whose top-level start function downloads an OS-specific binary from Cloudflare Workers...

Malicious code in bigops-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36dcb322eace39209bb0092ab7ea7c658481887a48eff948f116bfb7909ec131 Loading the package's main entry point auto-invokes helpers.js init, which downloads an OS-specific binary from obfuscated Cloudflare Workers...

Malicious code in bnpl-blocks-atom-bnpl-action-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f63c6572613805a02fc6c829d61dbd9a3aaa9b300147c9fe2f1fc74821cef8 On require of the package, index.js loads loader.js which selects a platform-specific payload path, fetches bytes from one of three runtime-assembled...

MAL-2026-12863 Malicious code in bnpl-blocks-atom-bnpl-anchor-menu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c841de8c355f3970534d5ec0f0c5eb63ed72a4d70f8d715c2e781c276acdb20 On require of bnpl-blocks-atom-bnpl-anchor-menu, index.js loads loader.js which assembles hostnames from split-string arrays evading static analysis,...

Malicious code in bnpl-blocks-atom-bnpl-dolyame-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 953d88d16a72d63369a076b864facc257f63385eb38d220ca649b8712ff50277 On require, index.js loads setup.js which selects a platform-specific binary path for linux/darwin/win32, downloads it over HTTPS from hardcoded...

MAL-2026-12864 Malicious code in bnpl-blocks-atom-bnpl-badge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57d88037b98733cb7376fa7fa11e80d1d6eb6f9373a7d6e1b555e96039b3abe On require of the package, index.js unconditionally loads polyfill.js, which downloads a platform-specific binary from one of three obfuscated...

MAL-2026-12882 Malicious code in bnpl-blocks-atom-bnpl-news-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcaf0c737c210018a282e73bbd1570e041a0c70f1043dcdd614e93ac64d8dd68 On require of this package, helpers.js selects a platform-specific URL, fetches an opaque binary from obfuscated Cloudflare Workers hosts...

MAL-2026-12883 Malicious code in bnpl-blocks-atom-bnpl-no-index-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02bfd5111a000f3f369e2f973d3717b22e1718fb2edbc4b38a07b67aa395815b On require of the package, index.js loads bootstrap.js which detects OS and architecture, then fetches an OS-specific binary from...

Malicious code in bnpl-blocks-atom-bnpl-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f37374f9e046ed30b7430e942c4e4f23ddc6ef55e76a3a00b2f40506c0f2bb9 On require of bnpl-blocks-atom-bnpl-text, index.js loads polyfill.js, which selects an OS-specific asset and fetches a binary over HTTPS from...

MAL-2026-12898 Malicious code in bnpl-blocks-atom-bnpl-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f37374f9e046ed30b7430e942c4e4f23ddc6ef55e76a3a00b2f40506c0f2bb9 On require of bnpl-blocks-atom-bnpl-text, index.js loads polyfill.js, which selects an OS-specific asset and fetches a binary over HTTPS from...

Malicious code in bnpl-blocks-atom-desktop-bnpl-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007bafa1def88d10e8f2c247e0ab1d0872d2a4f33f4bb134fe46877f75aa9eca On require, index.js unconditionally loads polyfill.js, which selects a platform-specific asset path and fetches an opaque binary from one of three...

MAL-2026-12901 Malicious code in bnpl-blocks-atom-desktop-bnpl-dangerously-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67ae3d6b9d42c80691f5be62d2b59d087b9457657a5fa12d4881c2db7c1aa5d On require of the package, index.js loads./ext.js, which reassembles C2 hostnames from split string fragments e.g. 'oob-worker.cf10x-.workers.dev'...

MAL-2026-12897 Malicious code in bnpl-blocks-atom-bnpl-store-button-set (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426cd2089d6b37d7f388aae2bafb56979692557475a20302f29ccd8bb00a064e On require of the package, index.js loads support.js which downloads a platform-specific binary from string-split-obfuscated Cloudflare Workers hosts...

Malicious code in bnpl-blocks-atom-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0bf90f9ba8f401c6300846c2e5fa3af2afd241fba5d967300272a8dc7eadec7 On require of bnpl-blocks-atom-container, index.js loads adapter.js which selects a platform-specific target path, downloads an opaque binary from on...

MAL-2026-12893 Malicious code in bnpl-blocks-atom-bnpl-skeleton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e88e9faf590414055ba1b7b48bdaa51df5e33735b9dd526e5d8d0650eceae7 On require of the package's main entry, init.js fetches a platform-specific binary from obfuscated Cloudflare Workers hostnames assembled by joining...

Malicious code in bnpl-blocks-atom-bnpl-small-image-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c774d6998dfe3f37ec23c527ddb5dee44c7448c88d5f059905ed3b6ef04959c index.js unconditionally requires helpers.js on module load. helpers.js reconstructs mirror hostnames from split string fragments e.g...

Malicious code in bnpl-blocks-consts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7651f2c7c9ce4e13909a22f522b625f2bcf6825ced0641259c77e9d46ab56ede Package is advertised as a constants wrapper but requiring it loads polyfill.js, which on import asynchronously downloads a platform-specific...