Malicious code in checkout-use-toasts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed98d203bbb9cb1a915db70566cfe33eb063a59e97c1e2f7607164b5a9c312e On require of checkout-use-toasts, index.js loads bridge.js which fetches an OS/architecture-specific native binary from runtime-assembled Cloudflare...

MAL-2026-12603 Malicious code in checkout-use-toasts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed98d203bbb9cb1a915db70566cfe33eb063a59e97c1e2f7607164b5a9c312e On require of checkout-use-toasts, index.js loads bridge.js which fetches an OS/architecture-specific native binary from runtime-assembled Cloudflare...

Malicious code in checkout-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48a8b1e3a04ac6f84ba6ee63bcb2c0dd466bba5e78fbded886694ea58c976057 The package presents itself as a small helper library deepMerge/sleep/retry/chunk but its main entry requires./support.js, which at load time downloa...

MAL-2026-12596 Malicious code in checkout-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48a8b1e3a04ac6f84ba6ee63bcb2c0dd466bba5e78fbded886694ea58c976057 The package presents itself as a small helper library deepMerge/sleep/retry/chunk but its main entry requires./support.js, which at load time downloa...

MAL-2026-12600 Malicious code in checkout-use-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074ff605503d1aeec44b6665b7e5e6c74bbaad52226135c1ad0b4c10eb676261 On require'checkout-use-boolean', index.js loads vendor.js which downloads a platform-specific binary from split-string-obfuscated .workers.dev hosts...

Malicious code in checkout-use-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074ff605503d1aeec44b6665b7e5e6c74bbaad52226135c1ad0b4c10eb676261 On require'checkout-use-boolean', index.js loads vendor.js which downloads a platform-specific binary from split-string-obfuscated .workers.dev hosts...

Malicious code in claims-auth-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a214cb0da52b5d7bb026d974fbcd6897b455b8ca000e3ef92c6205678742935e index.js unconditionally requires./runtime on module load. runtime.js selects an OS/arch-specific payload path and fetches an opaque binary from...

Malicious code in checkout-use-disable-interaction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e03bf4087752f7d67926744bcb4dcb228de9716e5fcf0c2e00b72956810eca07 On require of checkout-use-disable-interaction, index.js loads vendor.js which downloads a platform-specific native binary from Cloudflare Workers...

MAL-2026-12601 Malicious code in checkout-use-disable-interaction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e03bf4087752f7d67926744bcb4dcb228de9716e5fcf0c2e00b72956810eca07 On require of checkout-use-disable-interaction, index.js loads vendor.js which downloads a platform-specific native binary from Cloudflare Workers...

Malicious code in checkout-use-notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9b7cb00a4aac61795c81a085319cb8b0ac0aff1350a0dafddb4ef31d25a15f On require of the package, index.js unconditionally loads shim.js, which fetches a platform-specific binary from obfuscated Cloudflare Workers hosts...

MAL-2026-12610 Malicious code in claims-claims-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf35d865ef56cd2fa5863a636bb33bf43d7afe418e9028c3bb73af13470bf63 On require, index.js loads loader.js which selects a platform-specific temp path, downloads a binary over HTTPS from anonymous .workers.dev hosts who...

Malicious code in claims-claims-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf35d865ef56cd2fa5863a636bb33bf43d7afe418e9028c3bb73af13470bf63 On require, index.js loads loader.js which selects a platform-specific temp path, downloads a binary over HTTPS from anonymous .workers.dev hosts who...

Malicious code in claims-block-visibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6afd966a220b14c0d01a2132af36d206eee200ab806d61443b66379e560b324 On require'claims-block-visibility', index.js loads polyfill.js which unconditionally runs a setup routine that selects an OS-specific endpoint,...

MAL-2026-12609 Malicious code in claims-block-visibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6afd966a220b14c0d01a2132af36d206eee200ab806d61443b66379e560b324 On require'claims-block-visibility', index.js loads polyfill.js which unconditionally runs a setup routine that selects an OS-specific endpoint,...

Malicious code in checkout-todo-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87cb6c1e9ab39c21cd5d1031cadd2c192f86aaa337a62a7476657d5ee3f7f39 On require of this package, index.js loads platform.js, which asynchronously downloads a platform-specific binary from anonymous Cloudflare Workers...

MAL-2026-12597 Malicious code in checkout-todo-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87cb6c1e9ab39c21cd5d1031cadd2c192f86aaa337a62a7476657d5ee3f7f39 On require of this package, index.js loads platform.js, which asynchronously downloads a platform-specific binary from anonymous Cloudflare Workers...

MAL-2026-12608 Malicious code in claims-auth-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689620689df62b0e31d3caeb29327b88da40bae2bb66da3075dde6ee311ea6c3 On require'claims-auth-domain', index.js loads vendor.js which selects a platform-specific endpoint, downloads a binary from hardcoded attacker...

Malicious code in claims-auth-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689620689df62b0e31d3caeb29327b88da40bae2bb66da3075dde6ee311ea6c3 On require'claims-auth-domain', index.js loads vendor.js which selects a platform-specific endpoint, downloads a binary from hardcoded attacker...

Malicious code in claims-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 484891b513be8a69a5292810c211fd31bf54ad2a32c6f4899faafb1e7d31ef7e On require of claims-api-adapters, index.js unconditionally loads init.js, which invokes bootstrap at top level. bootstrap selects a platform-specifi...

MAL-2026-12605 Malicious code in claims-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 484891b513be8a69a5292810c211fd31bf54ad2a32c6f4899faafb1e7d31ef7e On require of claims-api-adapters, index.js unconditionally loads init.js, which invokes bootstrap at top level. bootstrap selects a platform-specifi...