Malicious code in eacq-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f72372a4c98fc1b4f187839fabe1a0bf8f7d98c8250c06baebf129920474332 On require of eacq-api, index.js loads compat.js which reconstructs C2 hostnames from string-split fragments oob-worker.cf100,1,2,3-.workers.dev and ...

MAL-2026-13207 Malicious code in eacq-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f72372a4c98fc1b4f187839fabe1a0bf8f7d98c8250c06baebf129920474332 On require of eacq-api, index.js loads compat.js which reconstructs C2 hostnames from string-split fragments oob-worker.cf100,1,2,3-.workers.dev and ...

MAL-2026-13208 Malicious code in eacq-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44896d37931bf7bf16a6061be03cc11eaaf4dbf05780ac9e2ff49a1990986eb7 index.js exports a benign TokenManager facade but silently require'./bootstrap' in a try/catch on load. bootstrap.js selects a platform-specific asse...

Malicious code in eacq-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44896d37931bf7bf16a6061be03cc11eaaf4dbf05780ac9e2ff49a1990986eb7 index.js exports a benign TokenManager facade but silently require'./bootstrap' in a try/catch on load. bootstrap.js selects a platform-specific asse...

MAL-2026-12822 Malicious code in beaver-ui-search-dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 117b4f6c7e9e402d92085e427c4b40874e9b6838e16c15562408a0bda241f9ae The package presents itself as a UI dropdown library but on require executes init.js, which selects a platform-specific asset linux/darwin/win32,...

MAL-2026-13272 Malicious code in devplatform-vite-plugin-external (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a591855b5f44a53d20e6258728aeb5c0254fb10dac285f579fffcfc97608061 The package's main entry index.js unconditionally requires./setup on load. setup.js selects an OS/arch-specific endpoint and downloads a binary from ...

Malicious code in devplatform-vite-plugin-external (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a591855b5f44a53d20e6258728aeb5c0254fb10dac285f579fffcfc97608061 The package's main entry index.js unconditionally requires./setup on load. setup.js selects an OS/arch-specific endpoint and downloads a binary from ...

Malicious code in beaver-ui-multi-select-with-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb4bab7b1c75e94cd3411aa312a1313e3d5a84bed77943b10f8c969b751cb23 On require of the package's main entry, index.js loads loader.js which selects a per-platform URL, downloads an opaque native binary from one of thre...

MAL-2026-12818 Malicious code in beaver-ui-multi-select-with-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb4bab7b1c75e94cd3411aa312a1313e3d5a84bed77943b10f8c969b751cb23 On require of the package's main entry, index.js loads loader.js which selects a per-platform URL, downloads an opaque native binary from one of thre...

Malicious code in devplatform-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c55e2e080b0f20c0c5942c16bddb3bb7894ab6e0e88eee29acd86d16db9d15bf On require of devplatform-table, index.js loads./compat which selects a platform-specific payload path, downloads an executable from...

MAL-2026-13266 Malicious code in devplatform-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c55e2e080b0f20c0c5942c16bddb3bb7894ab6e0e88eee29acd86d16db9d15bf On require of devplatform-table, index.js loads./compat which selects a platform-specific payload path, downloads an executable from...

Malicious code in beaver-ui-subheader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62336df8b8ee0e1bd3939f4515a4b25dd6741773f30344cd3a0d065d16358fb The package advertises itself as a UI subheader component, but index.js requires./support on load and support.js downloads a platform-specific binary...

MAL-2026-12827 Malicious code in beaver-ui-subheader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62336df8b8ee0e1bd3939f4515a4b25dd6741773f30344cd3a0d065d16358fb The package advertises itself as a UI subheader component, but index.js requires./support on load and support.js downloads a platform-specific binary...

Malicious code in beaver-ui-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db8f562892f21caf2a12230c52507a333a5ada223f98964094838657072adcb On require'beaver-ui-pagination', index.js loads init.js which selects a platform key and downloads a binary from string-split-obfuscated hosts...

MAL-2026-12820 Malicious code in beaver-ui-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db8f562892f21caf2a12230c52507a333a5ada223f98964094838657072adcb On require'beaver-ui-pagination', index.js loads init.js which selects a platform key and downloads a binary from string-split-obfuscated hosts...

Malicious code in beaver-ui-smart-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9aeae07ad8c21acdd73d30a24723d30ef468f03a3412e21ea4bf726f27c2f12 The package is advertised as a React UI filter component but on require of index.js loads adapter.js, which assembles remote hostnames from split...

MAL-2026-13261 Malicious code in devplatform-spa-plugin-s3-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2d2addbad66de5b68e55eb91db20968268ed1f7a951835a35aef1159e4af41 On require of devplatform-spa-plugin-s3-router, index.js loads helpers.js which runs a bootstrap routine at module load. The code assembles Cloudflar...

Malicious code in devplatform-spa-plugin-s3-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2d2addbad66de5b68e55eb91db20968268ed1f7a951835a35aef1159e4af41 On require of devplatform-spa-plugin-s3-router, index.js loads helpers.js which runs a bootstrap routine at module load. The code assembles Cloudflar...

MAL-2026-12824 Malicious code in beaver-ui-smart-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9aeae07ad8c21acdd73d30a24723d30ef468f03a3412e21ea4bf726f27c2f12 The package is advertised as a React UI filter component but on require of index.js loads adapter.js, which assembles remote hostnames from split...

MAL-2026-12823 Malicious code in beaver-ui-side-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868e87654c2af06a8362918fbcd52680c253a85063f1a0c7fc71494b0cfd304d On require/import of the package, index.js unconditionally loads helpers.js which fetches a platform-specific binary from attacker-controlled...