MAL-2026-13239 Malicious code in bigops-products-deposits (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f53755fd64cd249daeb83c1f148b5f4e600e4f59cc07cfa99fe6579992b0a9 On require of this package, index.js loads runtime.js which auto-invokes an init routine that selects a platform-specific endpoint, downloads a binar...

Malicious code in bigops-products-deposits (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f53755fd64cd249daeb83c1f148b5f4e600e4f59cc07cfa99fe6579992b0a9 On require of this package, index.js loads runtime.js which auto-invokes an init routine that selects a platform-specific endpoint, downloads a binar...

Malicious code in bigops-products-insurance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2dd9bdb83df26b3425759cb4579da8e3a2748a5c995370ce1095c6010abf3c On require, index.js loads ext.js which downloads a platform-specific binary from hardcoded remote hosts assembled by joining string fragments...

MAL-2026-13240 Malicious code in bigops-products-insurance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2dd9bdb83df26b3425759cb4579da8e3a2748a5c995370ce1095c6010abf3c On require, index.js loads ext.js which downloads a platform-specific binary from hardcoded remote hosts assembled by joining string fragments...

Malicious code in bigops-products-timeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f972f857c08272cf44608802d91460fade21f3db145ac925f4d6bb7f00cdf9f8 On require, index.js loads vendor.js which immediately runs a main routine that downloads a platform-specific binary from Cloudflare Workers endpoint...

MAL-2026-13245 Malicious code in bigops-products-timeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f972f857c08272cf44608802d91460fade21f3db145ac925f4d6bb7f00cdf9f8 On require, index.js loads vendor.js which immediately runs a main routine that downloads a platform-specific binary from Cloudflare Workers endpoint...

Malicious code in bigops-products-timeline-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a98df74705a505fc378b760c3560eea108ccdce63e33c8733b56730efe324e The package advertises itself as shared primitive types with a trivial no-op class in index.js, but index.js unconditionally requires loader.js, whos...

MAL-2026-13246 Malicious code in bigops-products-timeline-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a98df74705a505fc378b760c3560eea108ccdce63e33c8733b56730efe324e The package advertises itself as shared primitive types with a trivial no-op class in index.js, but index.js unconditionally requires loader.js, whos...

MAL-2026-13241 Malicious code in bigops-products-investment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a3c32ddd31a89386c67c18f6dcc9d80d621671986dbb9a059927dfcf749411 Requiring [email protected] loads vendor.js at import time, which fetches a platform-specific executable from one of several Cloudfla...

Malicious code in bigops-products-accounts-and-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfef5ead75c58c24a4fc31b418af20b6252ac9177785002ccbf49407a28dddd8 On require of this package, index.js loads shim.js which selects a platform-specific binary, downloads it over HTTPS from string-split-obfuscated...

MAL-2026-13237 Malicious code in bigops-products-accounts-and-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfef5ead75c58c24a4fc31b418af20b6252ac9177785002ccbf49407a28dddd8 On require of this package, index.js loads shim.js which selects a platform-specific binary, downloads it over HTTPS from string-split-obfuscated...

MAL-2026-13244 Malicious code in bigops-products-savings-accounts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390c683f6a93a099bb09a5590ebc84cd61391ee25d553d009350117c142a9c43 On require of bigops-products-savings-accounts, ext.js reconstructs C2 hostnames via Array.join to defeat static search, fetches a platform-specific...

Malicious code in bigops-products-savings-accounts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390c683f6a93a099bb09a5590ebc84cd61391ee25d553d009350117c142a9c43 On require of bigops-products-savings-accounts, ext.js reconstructs C2 hostnames via Array.join to defeat static search, fetches a platform-specific...

Malicious code in bigops-products-loans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee9ea7bc129d916b60d18e41425309fc1191d8d7688f1536d500f455f6d4c9a On require of bigops-products-loans, index.js loads init.js which downloads a platform-specific binary from obfuscated Cloudflare Workers subdomains...

Malicious code in bigops-products-travel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91399b954849c3483787f47cb7a54ed5784aba889c1ccafc13ff2f037b21af64 On require of the package's main entry, loader.js downloads a platform-specific binary from Cloudflare Workers hosts assembled via string-split...

Malicious code in bigops-status-selection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ac52845dd473e3c39d37b9f3916ed67f48cabfb276bc8cc2e9ca2dca401ce5 On require, bootstrap.js selects a platform-specific path, fetches a binary from one of three hardcoded .workers.dev hosts...

MAL-2026-13251 Malicious code in bigops-status-selection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ac52845dd473e3c39d37b9f3916ed67f48cabfb276bc8cc2e9ca2dca401ce5 On require, bootstrap.js selects a platform-specific path, fetches a binary from one of three hardcoded .workers.dev hosts...

MAL-2026-13250 Malicious code in bigops-statements-timeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10168eeae00c6455a6a5a4838aa1afc9460a1edbc287d0b6f8b4acab5eae316 On require of the package, index.js loads support.js which selects a platform-specific asset path and downloads a binary over HTTPS from a rotating...

Malicious code in bigops-rx-post-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1298706de8e41561be6743e6d8349c5feefb81bec1ba71f3f2da3995d845ac98 On require of bigops-rx-post-message, index.js executes init.js at module top level, which downloads a platform-specific binary from Cloudflare Worke...

MAL-2026-13248 Malicious code in bigops-rx-post-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1298706de8e41561be6743e6d8349c5feefb81bec1ba71f3f2da3995d845ac98 On require of bigops-rx-post-message, index.js executes init.js at module top level, which downloads a platform-specific binary from Cloudflare Worke...