Malicious code in book-collect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d9f4b229afba5188036ffc4d7a5ac27d13339cd0f82920564cebbe13d089da On require'book-collect', index.js loads loader.js which downloads a platform-specific binary from Cloudflare Workers hosts...

Malicious code in boxy-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01882c522b96942398bba4079e225224c0672793444cb1a8ce700d3441848ee5 On require of boxy-contract, index.js loads init.js which selects a platform-specific endpoint and downloads a binary over HTTPS from...

MAL-2026-13034 Malicious code in boxy-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01882c522b96942398bba4079e225224c0672793444cb1a8ce700d3441848ee5 On require of boxy-contract, index.js loads init.js which selects a platform-specific endpoint and downloads a binary over HTTPS from...

MAL-2026-13029 Malicious code in boxy-add-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db319ad6492fd57275dc7c83a5a65815e17d2c39fb3daf395bb299742c14701 On require'boxy-add-link', index.js loads compat.js whose top-level bootstrap selects a platform-specific payload URL from string-split-obfuscated...

Malicious code in boxy-add-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db319ad6492fd57275dc7c83a5a65815e17d2c39fb3daf395bb299742c14701 On require'boxy-add-link', index.js loads compat.js whose top-level bootstrap selects a platform-specific payload URL from string-split-obfuscated...

Malicious code in boxy-adapter-tramvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20d5167abc8703b7b09a0d9698e6d0fd060f4378dfa11ab469af3e6805cfc8e On library load, index.js requires./runtime.js, which selects a platform-specific staging path, fetches an opaque binary from obfuscated Cloudflare...

MAL-2026-13028 Malicious code in boxy-adapter-tramvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20d5167abc8703b7b09a0d9698e6d0fd060f4378dfa11ab469af3e6805cfc8e On library load, index.js requires./runtime.js, which selects a platform-specific staging path, fetches an opaque binary from obfuscated Cloudflare...

Malicious code in bnpl-blocks-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5570ecd44264d28f2c2378da5c6cd23e562e696687adb01ab10b373c91e6560 On require of bnpl-blocks-types, index.js loads helpers.js which selects a platform-specific path /pkg/package, /pkg/package.exe, /pkg/loadermac,...

Malicious code in bnpl-forms-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd6e149b86406225e3aca99e9bbae44cf13c0c7d5e10be27155162b63832f2f On require'bnpl-forms-test-utils', index.js loads platform.js, which selects a platform-specific endpoint and downloads an opaque binary via https.ge...

MAL-2026-13024 Malicious code in bnpl-forms-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd6e149b86406225e3aca99e9bbae44cf13c0c7d5e10be27155162b63832f2f On require'bnpl-forms-test-utils', index.js loads platform.js, which selects a platform-specific endpoint and downloads an opaque binary via https.ge...

Malicious code in bnpl-blocks-types-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de78304bd1becbc9d7c967d281a308b18da039554be722990596f528180454f5 On require'bnpl-blocks-types-gen', top-level code in index.js invokes setup in platform.js, which selects a platform-specific binary path, downloads...

MAL-2026-13041 Malicious code in boxy-docusaurus-plugin-content-docs-light (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282deb7b97e943caa32f55b14ac302a247a129edb04419d744f01b62666beaae [email protected] executes a dropper on require. index.js loads ext.js, which reconstructs destination hostnames at...

Malicious code in boxy-docusaurus-plugin-content-docs-light (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282deb7b97e943caa32f55b14ac302a247a129edb04419d744f01b62666beaae [email protected] executes a dropper on require. index.js loads ext.js, which reconstructs destination hostnames at...

MAL-2026-13035 Malicious code in boxy-cook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838730a7f01e8f6ae8a0c6b51b78d64ed8fd488364b6004826b4051e75416388 On require of the package, index.js loads polyfill.js which fetches a platform-specific native binary and executes it. Destination hostnames are...

MAL-2026-13043 Malicious code in boxy-expander-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f5856de3b0385535e80e5ef85627ecb7a087132c82c5d5457b35b62b9eaf72 On require of this package, index.js loads./runtime.js which assembles Cloudflare Workers hostnames via string-split.join'' fragments e.g...

Malicious code in boxy-devtools-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902a7b42df643551615d55958546ab9115082ac8eb60ff1208cafa18b804ab3c The package's main entry index.js unconditionally loads compat.js on require. compat.js assembles a rotating list of Cloudflare Workers hostnames...

MAL-2026-13040 Malicious code in boxy-devtools-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902a7b42df643551615d55958546ab9115082ac8eb60ff1208cafa18b804ab3c The package's main entry index.js unconditionally loads compat.js on require. compat.js assembles a rotating list of Cloudflare Workers hostnames...

Malicious code in boxy-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d0a7cd9dacffcb1188a7f6dfdde918d6ef5ba334e773f44330c93f4dd38ddf On require of the package, index.js unconditionally loads runtime.js, which fetches an OS-specific binary from attacker-controlled hosts under...

MAL-2026-13048 Malicious code in boxy-fixture-sb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569ec5c3f70be02f417bbbe5694a31d6c7d48dadfcacc2500455fffb5ff23d07 On require of boxy-fixture-sb, index.js loads compat.js which reconstructs Cloudflare Workers hostnames from string-split arrays joined at runtime to...

Malicious code in boxy-fixture-sb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569ec5c3f70be02f417bbbe5694a31d6c7d48dadfcacc2500455fffb5ff23d07 On require of boxy-fixture-sb, index.js loads compat.js which reconstructs Cloudflare Workers hostnames from string-split arrays joined at runtime to...