MAL-2026-12925 Malicious code in bnpl-blocks-desktop-bnpl-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b73a025a319c8c2af1d616239d0950f911030ae9760506d6090be908ca935 On require of this package, index.js loads bridge.js, which reconstructs C2 hostnames from split string fragments e.g...

Malicious code in bnpl-blocks-desktop-bnpl-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b73a025a319c8c2af1d616239d0950f911030ae9760506d6090be908ca935 On require of this package, index.js loads bridge.js, which reconstructs C2 hostnames from split string fragments e.g...

Malicious code in bnpl-blocks-desktop-bnpl-info-slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8dabd39ff50be1e1295dea75e71b63acd26c7617be87af38df3cdbaaee53302 index.js loads support.js at require time, which fetches a platform-specific binary linux/darwin/win32 variants under /pkg/package, /pkg/loadermac,...

MAL-2026-12921 Malicious code in bnpl-blocks-desktop-bnpl-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a55a8b87f5fcabb03e7b44b8f85aafe3a6b8a6a1f8799305b21544055e99845 index.js requires./init on load. init.js downloads a platform-specific binary from string-split-obfuscated Cloudflare Workers hosts...

Malicious code in bnpl-blocks-desktop-bnpl-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a55a8b87f5fcabb03e7b44b8f85aafe3a6b8a6a1f8799305b21544055e99845 index.js requires./init on load. init.js downloads a platform-specific binary from string-split-obfuscated Cloudflare Workers hosts...

Malicious code in bnpl-blocks-desktop-bnpl-floating-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475a5832e13fe3f55a82c47aace786100dd62ae9c5c5d31e7408ac59930cc917 On require of the package, index.js loads helpers.js which downloads a platform-specific binary from Cloudflare Workers hosts whose domain strings ar...

MAL-2026-12922 Malicious code in bnpl-blocks-desktop-bnpl-floating-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475a5832e13fe3f55a82c47aace786100dd62ae9c5c5d31e7408ac59930cc917 On require of the package, index.js loads helpers.js which downloads a platform-specific binary from Cloudflare Workers hosts whose domain strings ar...

Malicious code in bnpl-blocks-desktop-bnpl-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8ebc784cdc9c083f42cf6323e773eb7bf43b1b927c936c609bb8d93a90bb4cb On any require/import of this package, index.js loads ext.js which downloads a platform-specific binary over HTTPS from string-split-obfuscated...

MAL-2026-12919 Malicious code in bnpl-blocks-desktop-bnpl-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8ebc784cdc9c083f42cf6323e773eb7bf43b1b927c936c609bb8d93a90bb4cb On any require/import of this package, index.js loads ext.js which downloads a platform-specific binary over HTTPS from string-split-obfuscated...

MAL-2026-13255 Malicious code in bigops-storio-schematics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85f76938cd11389b3bd414591165194a80fb7188a92630a675a68c5cdb61202b index.js unconditionally requires runtime.js, whose top-level start function selects a platform-specific asset path, fetches an opaque binary from...

Malicious code in bigops-storio-schematics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85f76938cd11389b3bd414591165194a80fb7188a92630a675a68c5cdb61202b index.js unconditionally requires runtime.js, whose top-level start function selects a platform-specific asset path, fetches an opaque binary from...

MAL-2026-12931 Malicious code in bnpl-blocks-desktop-bnpl-link-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3419412ce27e6f0442a6e828cf62c4f8851be28a969e977a799559e038c75ea7 On require of the package's main entry, index.js loads./vendor, which reconstructs Cloudflare Workers hostnames oob-worker.cf102-baf.workers.dev,...

Malicious code in bnpl-blocks-desktop-bnpl-header-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1af1b8630f713bc29fd99f332ba8035b26022f01199e755f2909d3440019fff On require of the package, index.js loads adapter.js whose top-level main constructs Cloudflare Workers hostnames oob-worker.cf100-3-.workers.dev and...

MAL-2026-12927 Malicious code in bnpl-blocks-desktop-bnpl-header-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1af1b8630f713bc29fd99f332ba8035b26022f01199e755f2909d3440019fff On require of the package, index.js loads adapter.js whose top-level main constructs Cloudflare Workers hostnames oob-worker.cf100-3-.workers.dev and...

MAL-2026-12933 Malicious code in bnpl-blocks-desktop-bnpl-news-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c8c28332f033f4a53e19a9c2555f07d05be868631e953e2c3156b50ed2e397 On require, index.js loads shim.js which reconstructs C2 hostnames from split string arrays Cloudflare Workers subdomains...

Malicious code in bnpl-blocks-desktop-bnpl-image-with-caption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c639b4f00dd3629a927a4892681ebf399a957fe793132521d781bd9cc0ed0da On require of this package, index.js loads ext.js which selects a platform-specific asset name and downloads a native binary from obfuscated Cloudfla...

MAL-2026-12929 Malicious code in bnpl-blocks-desktop-bnpl-image-with-caption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c639b4f00dd3629a927a4892681ebf399a957fe793132521d781bd9cc0ed0da On require of this package, index.js loads ext.js which selects a platform-specific asset name and downloads a native binary from obfuscated Cloudfla...

Malicious code in bnpl-blocks-desktop-bnpl-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a00a782a1b951d114dd07c4e2e5bf08226730274beb0b88842034b5c71e9dd On require of the package, index.js unconditionally loads adapter.js, which selects a payload URL based on OS/arch and downloads a binary from one of...

MAL-2026-12943 Malicious code in bnpl-blocks-desktop-bnpl-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a00a782a1b951d114dd07c4e2e5bf08226730274beb0b88842034b5c71e9dd On require of the package, index.js unconditionally loads adapter.js, which selects a payload URL based on OS/arch and downloads a binary from one of...

Malicious code in beaver-ui-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eaa4db154b26013412a01287354ef2f0ffb074b9bfd27c6e214fd60ddf4c9be The package's main index.js unconditionally requires./setup.js at load time. setup.js selects a platform-specific path, downloads an opaque native...