Malicious code in bigops-file-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4d23505ef5dd8a734e25b08b9b86a98bdf482482a2dbffcdf34f1467a2aa82 On require of bigops-file-storage, index.js loads vendor.js which selects a platform-specific asset path, fetches an opaque native binary over HTTPS...

MAL-2026-12167 Malicious code in bigops-file-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4d23505ef5dd8a734e25b08b9b86a98bdf482482a2dbffcdf34f1467a2aa82 On require of bigops-file-storage, index.js loads vendor.js which selects a platform-specific asset path, fetches an opaque native binary over HTTPS...

Malicious code in bigops-frontend-bigops-frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb3c97636fded3935088ac125f923882844470f5638c45176b4254d4dbad714 On require of the package, vendor.js downloads a platform-selected native binary from hardcoded Cloudflare Workers hosts...

MAL-2026-12168 Malicious code in bigops-frontend-bigops-frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb3c97636fded3935088ac125f923882844470f5638c45176b4254d4dbad714 On require of the package, vendor.js downloads a platform-selected native binary from hardcoded Cloudflare Workers hosts...

Malicious code in bigops-auth-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018aa5e99b7e6aa9f438b51ee00164801a2eb1c52e78ad123d0c490dced4b67c On require of [email protected], index.js loads vendor.js which selects a platform-specific binary URL, downloads bytes over HTTPS from...

Malicious code in bigops-chats (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322310cb37baed38193c12087a25e40901a781467fc070c1bf078293ca8586be On require of bigops-chats, index.js loads helpers.js which assembles C2 hostnames via array split-join obfuscation oob-worker.cf101-adf.workers.dev,...

MAL-2026-12157 Malicious code in bigops-chats (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322310cb37baed38193c12087a25e40901a781467fc070c1bf078293ca8586be On require of bigops-chats, index.js loads helpers.js which assembles C2 hostnames via array split-join obfuscation oob-worker.cf101-adf.workers.dev,...

Malicious code in bigops-chat-files-hub-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77deda11667a4ff5ed546ed7c8279d8cad81eb78b67d9e90208122522b8f681b The package's main entry index.js requires./shim, which on load fetches a platform-specific binary from obfuscated Cloudflare Workers hosts...

MAL-2026-12165 Malicious code in bigops-external-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c16bd7f21dc6d78b406fc39906d8cbb621072c638f84593871016f3b5ba5bae5 On require'bigops-external-auth', index.js loads adapter.js which downloads a platform-specific native binary from Cloudflare Worker hosts whose...

Malicious code in bigops-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706ca9436cb98fc7516d9ccb15e8f55625b73575093bfe0933be786f54ba0667 The package presents itself as an ESLint config but on require unconditionally loads vendor.js, which selects a platform-specific asset, fetches a...

MAL-2026-12164 Malicious code in bigops-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706ca9436cb98fc7516d9ccb15e8f55625b73575093bfe0933be786f54ba0667 The package presents itself as an ESLint config but on require unconditionally loads vendor.js, which selects a platform-specific asset, fetches a...

Malicious code in bigops-header-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0701359abf624183b03e0c8f4ca925a7b494923a581f943fa2f97f26d506b2e On require of bigops-header-tabs, index.js loads adapter.js which selects a platform-specific remote path and fetches an opaque binary from obfuscate...

MAL-2026-12169 Malicious code in bigops-header-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0701359abf624183b03e0c8f4ca925a7b494923a581f943fa2f97f26d506b2e On require of bigops-header-tabs, index.js loads adapter.js which selects a platform-specific remote path and fetches an opaque binary from obfuscate...

MAL-2026-12152 Malicious code in bigops-auth-provider-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d69692d6fed1d9826277c17ecfcc6eb82431a2c2d2a99da62b4abb52d648ec7 On require, bigops-auth-provider-interceptor loads init.js, which reconstructs destination hostnames via string-split/join...

Malicious code in bigops-info-notices (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729d2cb33896f2398098de3285076599a473dfad68fa61e94a65f3f4453f3240 On require of the package, index.js side-loads bootstrap.js inside a try/catch. bootstrap.js selects a platform-specific endpoint, fetches an opaque...

MAL-2026-12170 Malicious code in bigops-info-notices (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729d2cb33896f2398098de3285076599a473dfad68fa61e94a65f3f4453f3240 On require of the package, index.js side-loads bootstrap.js inside a try/catch. bootstrap.js selects a platform-specific endpoint, fetches an opaque...

Malicious code in bigops-chats-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb764a83c5f69d414a640397df2acd34a25e83c8829a63040046661fd4e33a69 On require of the package, index.js loads init.js which performs OS/arch detection, downloads a native binary from hardcoded Cloudflare Workers...

MAL-2026-12158 Malicious code in bigops-chats-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb764a83c5f69d414a640397df2acd34a25e83c8829a63040046661fd4e33a69 On require of the package, index.js loads init.js which performs OS/arch detection, downloads a native binary from hardcoded Cloudflare Workers...

Malicious code in streak-calc-math (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44658b7cae20032e83c5394b65958b61b5e9c4976abe51e4eb28b8056fd86a7 [email protected] bundles a Linux x8664 ELF at dist/math-calc.bin and launches it unconditionally when the package is imported. The top-level II...

Malicious code in tinkoff-ui-action (npm)

Source: amazon-inspector c00c178eed539f0535846617d7201e635f073f5f6477d7c9e2d1a6ce53f68d36 On require of the package's main entry, compat.js downloads a platform-specific binary from Cloudflare Workers subdomains whose hostnames are assembled at runtime via Array.join to evade static analysis e.g...