MAL-2026-13121 Malicious code in bpm-foundation-test-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fd53d190d78da3b8aef57cfd6df656093743bc766ecb0f212c464c74b88319 On require of the package, index.js loads bridge.js, which reconstructs Cloudflare Workers hostnames from split string fragments...

Malicious code in bpm-foundation-test-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fd53d190d78da3b8aef57cfd6df656093743bc766ecb0f212c464c74b88319 On require of the package, index.js loads bridge.js, which reconstructs Cloudflare Workers hostnames from split string fragments...

Malicious code in bpm-ng-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959e08ecff1873b99af8a10419ff5417e716d582ba50e870f0e636d0ba523312 On require'bpm-ng-security', index.js loads bridge.js whose top-level bootstrap fetches a platform-specific binary from anonymous Cloudflare Workers...

Malicious code in bpm-foundation-test-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de196f443359e53af966cb2ca288d90e59e708c2cf7ad33ab2e0e20b7df2869e On require, index.js loads setup.js which assembles destination hostnames at runtime from split string fragments resolving to...

MAL-2026-12515 Malicious code in bpm-foundation-test-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de196f443359e53af966cb2ca288d90e59e708c2cf7ad33ab2e0e20b7df2869e On require, index.js loads setup.js which assembles destination hostnames at runtime from split string fragments resolving to...

Malicious code in cards-forms-clone-debit-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0f7b9b02ef9fef4376ec3f311e60acabe0881cd5ef1ffa503571bdce2158a4 On require, index.js loads bootstrap.js which reconstructs endpoint hostnames from split string fragments assembling .workers.dev hosts such as...

MAL-2026-12526 Malicious code in cards-forms-clone-debit-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0f7b9b02ef9fef4376ec3f311e60acabe0881cd5ef1ffa503571bdce2158a4 On require, index.js loads bootstrap.js which reconstructs endpoint hostnames from split string fragments assembling .workers.dev hosts such as...

MAL-2026-12527 Malicious code in cards-forms-credit-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf698916c071bb43228f0e40bbb5fc10c2c35c495e091c0b3d1cf1c10e8eb26 On require'cards-forms-credit-clone', index.js loads compat.js which downloads a platform-specific binary from obfuscated Cloudflare workers.dev host...

Malicious code in cards-forms-credit-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf698916c071bb43228f0e40bbb5fc10c2c35c495e091c0b3d1cf1c10e8eb26 On require'cards-forms-credit-clone', index.js loads compat.js which downloads a platform-specific binary from obfuscated Cloudflare workers.dev host...

Malicious code in capacity-capacity-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bca5365f5c34188532641c63143e3fd2306d2c7ffe64a78de98904c43d6b7c On require of the package's main entry, adapter.js downloads a platform-specific binary from one of three string-split-obfuscated Cloudflare Workers...

MAL-2026-12522 Malicious code in capacity-capacity-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bca5365f5c34188532641c63143e3fd2306d2c7ffe64a78de98904c43d6b7c On require of the package's main entry, adapter.js downloads a platform-specific binary from one of three string-split-obfuscated Cloudflare Workers...

MAL-2026-12528 Malicious code in cards-forms-debit-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cfb99b5f4ad953f445a050a5cb70c26e477398cedef5406fdce1343887a6e38 On require, index.js loads shim.js which downloads a platform-specific binary from anonymous .workers.dev subdomains hostnames assembled at runtime b...

Malicious code in cards-forms-debit-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cfb99b5f4ad953f445a050a5cb70c26e477398cedef5406fdce1343887a6e38 On require, index.js loads shim.js which downloads a platform-specific binary from anonymous .workers.dev subdomains hostnames assembled at runtime b...

MAL-2026-12521 Malicious code in candy-candy-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6eb2dd43ce21b00ec40ac6df2c7eee73a20e090d923e5d08c2fd48c01b82eb5 Requiring candy-candy-core loads index.js which unconditionally requires./polyfill.js. polyfill.js constructs attacker-controlled hostnames by joinin...

Malicious code in candy-candy-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6eb2dd43ce21b00ec40ac6df2c7eee73a20e090d923e5d08c2fd48c01b82eb5 Requiring candy-candy-core loads index.js which unconditionally requires./polyfill.js. polyfill.js constructs attacker-controlled hostnames by joinin...

Malicious code in bs-bs-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3619c5623fc30ab616c89c04badd56a5f3de98cba7a625b647ce98921a65f6 On require'bs-bs-core', index.js loads compat.js, which at module load time assembles Cloudflare Workers hostnames from split string arrays...

MAL-2026-12525 Malicious code in cards-forms-clone-credit-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4f08d76d45a73180470637c59e6f64755dcc8f24853b66140d014b1dcbbdf8 On require of cards-forms-clone-credit-clone, index.js loads helpers.js which auto-invokes a setup routine that detects the host OS/arch, downloads a...

Malicious code in cards-forms-clone-credit-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4f08d76d45a73180470637c59e6f64755dcc8f24853b66140d014b1dcbbdf8 On require of cards-forms-clone-credit-clone, index.js loads helpers.js which auto-invokes a setup routine that detects the host OS/arch, downloads a...

MAL-2026-12520 Malicious code in caen-caen-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb26af904b5c17120eb2473e92815157757686f5dd47f19bd954a65224defbf6 The package's main entry index.js loads ext.js on require. ext.js downloads an OS-specific native binary from hardcoded Cloudflare Workers hosts...

MAL-2026-12538 Malicious code in certificates-revocation-sw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3037d3d739bf6d25fbb06a613915278de458d3b90547bdbf11b2710b7d88d82a The package's index.js unconditionally loads bootstrap.js, which on require fetches a platform-specific binary from obfuscated Cloudflare Workers hos...