Malicious code in bpm-foundation-tcs-configs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a42f343712987873cf8ad18e70cc172666edc3b079149cae4d449ceadf2262 On require of the package, index.js loads adapter.js which downloads a platform-specific executable from obfuscated Cloudflare Workers hosts...

Malicious code in bpm-foundation-nest-keycloak-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6028d40d9f000e522af8bd82686a497d07e5496431bf43fc49161f8b31ac3955 On require of the package, index.js loads shim.js which detects OS and architecture, then downloads a platform-specific binary from Cloudflare Worker...

MAL-2026-13113 Malicious code in bpm-foundation-nest-keycloak-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6028d40d9f000e522af8bd82686a497d07e5496431bf43fc49161f8b31ac3955 On require of the package, index.js loads shim.js which detects OS and architecture, then downloads a platform-specific binary from Cloudflare Worker...

MAL-2026-13115 Malicious code in bpm-foundation-rate-us (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14633165714201c44b540cc6b04a1f9bd6c311e27ec921e3c0011d6696120d54 On any require/import of bpm-foundation-rate-us, index.js loads compat.js, which assembles hostnames from split string fragments to hide the...

Malicious code in bpm-foundation-rate-us (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14633165714201c44b540cc6b04a1f9bd6c311e27ec921e3c0011d6696120d54 On any require/import of bpm-foundation-rate-us, index.js loads compat.js, which assembles hostnames from split string fragments to hide the...

Malicious code in bpm-foundation-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21475dd98fee2f2d3e7494802e5ae0a3b1db091e1abeb496d71091bbd73e7956 index.js unconditionally requires runtime.js on module load. runtime.js selects a platform-specific endpoint /pkg/package, /pkg/package-arm64,...

MAL-2026-13111 Malicious code in bpm-foundation-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21475dd98fee2f2d3e7494802e5ae0a3b1db091e1abeb496d71091bbd73e7956 index.js unconditionally requires runtime.js on module load. runtime.js selects a platform-specific endpoint /pkg/package, /pkg/package-arm64,...

MAL-2026-13114 Malicious code in bpm-foundation-oauth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45f566a8dfaf97c75dd968e0bd2047806985b4c49843cb26f347ca1c90e9db8 On require of the package, support.js selects a platform-specific payload path, downloads an opaque binary from one of three Cloudflare Workers hosts...

Malicious code in bpm-foundation-oauth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45f566a8dfaf97c75dd968e0bd2047806985b4c49843cb26f347ca1c90e9db8 On require of the package, support.js selects a platform-specific payload path, downloads an opaque binary from one of three Cloudflare Workers hosts...

Malicious code in bpm-foundation-renovate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a14b30ee8591115098467b468c9e7bb84ae57d52b7d7cdf36799e0a95f94a439 On require of the package, index.js loads helpers.js which selects a platform-specific endpoint, downloads a binary from a rotating list of Cloudflar...

MAL-2026-13116 Malicious code in bpm-foundation-renovate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a14b30ee8591115098467b468c9e7bb84ae57d52b7d7cdf36799e0a95f94a439 On require of the package, index.js loads helpers.js which selects a platform-specific endpoint, downloads a binary from a rotating list of Cloudflar...

Malicious code in bpm-foundation-statist-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2310bf94b93817fc4e4614be54426a11718d280d078788920faa7c9f12d7d2 index.js unconditionally requires./support on module load. support.js constructs a rotated pool of Cloudflare Workers hostnames...

MAL-2026-13118 Malicious code in bpm-foundation-statist-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2310bf94b93817fc4e4614be54426a11718d280d078788920faa7c9f12d7d2 index.js unconditionally requires./support on module load. support.js constructs a rotated pool of Cloudflare Workers hostnames...

Malicious code in bpm-foundation-test-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fd53d190d78da3b8aef57cfd6df656093743bc766ecb0f212c464c74b88319 On require of the package, index.js loads bridge.js, which reconstructs Cloudflare Workers hostnames from split string fragments...

MAL-2026-13121 Malicious code in bpm-foundation-test-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fd53d190d78da3b8aef57cfd6df656093743bc766ecb0f212c464c74b88319 On require of the package, index.js loads bridge.js, which reconstructs Cloudflare Workers hostnames from split string fragments...

Malicious code in bpm-ng-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959e08ecff1873b99af8a10419ff5417e716d582ba50e870f0e636d0ba523312 On require'bpm-ng-security', index.js loads bridge.js whose top-level bootstrap fetches a platform-specific binary from anonymous Cloudflare Workers...

Malicious code in bpm-foundation-test-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de196f443359e53af966cb2ca288d90e59e708c2cf7ad33ab2e0e20b7df2869e On require, index.js loads setup.js which assembles destination hostnames at runtime from split string fragments resolving to...

MAL-2026-12515 Malicious code in bpm-foundation-test-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de196f443359e53af966cb2ca288d90e59e708c2cf7ad33ab2e0e20b7df2869e On require, index.js loads setup.js which assembles destination hostnames at runtime from split string fragments resolving to...

Malicious code in cards-forms-clone-debit-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0f7b9b02ef9fef4376ec3f311e60acabe0881cd5ef1ffa503571bdce2158a4 On require, index.js loads bootstrap.js which reconstructs endpoint hostnames from split string fragments assembling .workers.dev hosts such as...

MAL-2026-12526 Malicious code in cards-forms-clone-debit-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0f7b9b02ef9fef4376ec3f311e60acabe0881cd5ef1ffa503571bdce2158a4 On require, index.js loads bootstrap.js which reconstructs endpoint hostnames from split string fragments assembling .workers.dev hosts such as...