MAL-2026-12962 Malicious code in bnpl-blocks-independent-bnpl-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7923e39747ffb32d18cc1b5bfa2c85edf342475c9bd998b65fb407acd5592c44 On require, compat.js selects a platform-specific path and downloads a binary from one of four hardcoded Cloudflare Workers hosts whose names are...

Malicious code in bnpl-blocks-independent-bnpl-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7923e39747ffb32d18cc1b5bfa2c85edf342475c9bd998b65fb407acd5592c44 On require, compat.js selects a platform-specific path and downloads a binary from one of four hardcoded Cloudflare Workers hosts whose names are...

Malicious code in bnpl-blocks-independent-bnpl-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab4ebaf15b60e320da6dd04630765fd36dc2c3a012360127653174a350e8c88 index.js requires bootstrap.js on module load. bootstrap.js reassembles obfuscated hostnames via array-join e.g. oob-worker.cf102-baf.workers.dev,...

Malicious code in bnpl-blocks-independent-bnpl-text-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc1ec9ae3c3510564b412ad20157f80b59ebe816ceda37ee01a3a46fd146b3f On require of this package, index.js loads compat.js which unconditionally bootstraps a dropper. It selects a platform-specific payload path, fetches...

MAL-2026-12964 Malicious code in bnpl-blocks-independent-bnpl-origination (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7441b8e4b9daaaa54b9963006ffa7868dc6f2d7ffaa65b4c11a029c43240dde1 On require of the package's main entry, runtime.js downloads a platform-specific binary from Cloudflare Workers hosts whose names are reassembled at...

Malicious code in bnpl-blocks-independent-bnpl-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5739a73a4f30d9828f08510a518df278f00214576e8c2aaea847bc536989bd The package advertises itself as a UI title component but on require of index.js loads support.js, which selects a per-OS payload path, fetches an...

MAL-2026-12973 Malicious code in bnpl-blocks-independent-bnpl-tiles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d26dece8e18d84828b36740c2f6b04f29f695b2a0df9c6699b58cc1f83e11a On require of this package, index.js loads adapter.js which selects a platform-specific asset path, reassembles destination hostnames from split...

MAL-2026-12976 Malicious code in bnpl-blocks-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161162281afaf68fd193e2521beaf60d32c850e29cc276192497eee09646a55a On require'bnpl-blocks-markdown', index.js loads bootstrap.js which downloads a platform-specific binary from runtime-assembled Cloudflare Workers...

Malicious code in bnpl-blocks-independent-bnpl-separator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e34f125883bf487e46fede3b2094978e853711c0688c8712cc5628e929f0ad Requiring this package triggers init.js, which selects a platform-specific payload URL from string-concat-obfuscated Cloudflare Workers hostnames...

MAL-2026-12984 Malicious code in bnpl-blocks-mobile-bnpl-category-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b498a386a4aeab43aedc022880d8bf90e2d8feb2cc94bafe313fa73c09b4b1 On any require of this package, index.js loads loader.js, which reconstructs destination hostnames at runtime from array-join fragments...

MAL-2026-12988 Malicious code in bnpl-blocks-mobile-bnpl-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f1214c6f46b90fa1bf81bde9a79c81a5193e84969ef756f50cbf895c49515b On require of the package, index.js loads shim.js which selects a platform-specific binary from a list of string-split-obfuscated Cloudflare Workers...

MAL-2026-12985 Malicious code in bnpl-blocks-mobile-bnpl-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34cee08f3d1aef3c44a67fde619cdd51f0653434204b2390064eb0baad9f2c2 The package's main entry requires./compat on load, which selects a platform-specific payload Windows.exe, Linux ELF, macOS Mach-O, downloads it over...

Malicious code in bnpl-blocks-mobile-bnpl-action-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3362a69d0a3341fff7a48ebdd4a8231ec5a365dc237c62a5b95619fe051e762 On require, index.js loads bootstrap.js, which selects a per-platform payload path, fetches a binary over HTTPS from hardcoded hosts assembled by...

MAL-2026-12977 Malicious code in bnpl-blocks-mobile-bnpl-action-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3362a69d0a3341fff7a48ebdd4a8231ec5a365dc237c62a5b95619fe051e762 On require, index.js loads bootstrap.js, which selects a per-platform payload path, fetches a binary over HTTPS from hardcoded hosts assembled by...

MAL-2026-12989 Malicious code in bnpl-blocks-mobile-bnpl-floating-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8101254611004c84932cd102d4fb71dc7e692d67696df081e66bd37ba3088b On require, index.js loads support.js whose top-level main downloads a platform-specific binary from author-controlled hosts assembled via string-arr...

MAL-2026-12981 Malicious code in bnpl-blocks-mobile-bnpl-button-set (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d860ca2d011c1e76bfee65b763f4a2d612dfad059ebbde41bb8cb79bc5680808 On require of the package, init.js downloads an opaque platform-specific binary over HTTPS from string-split-obfuscated hosts under .workers.dev...

Malicious code in bnpl-blocks-mobile-bnpl-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f511a9eac93e0ef06eeec5ab7ec22330cb092c4fda952ec540f4a9be3fc522f On require of the package, index.js loads bridge.js which fetches an OS-specific binary from hardcoded Cloudflare Workers hosts...

MAL-2026-12991 Malicious code in bnpl-blocks-mobile-bnpl-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f511a9eac93e0ef06eeec5ab7ec22330cb092c4fda952ec540f4a9be3fc522f On require of the package, index.js loads bridge.js which fetches an OS-specific binary from hardcoded Cloudflare Workers hosts...

MAL-2026-12994 Malicious code in bnpl-blocks-mobile-bnpl-image-with-caption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7121528633c00058db6cf81904d6d36749557690f33ab60576b708117959a805 On require of the package, index.js loads polyfill.js which selects a platform-specific endpoint and downloads a binary over HTTPS from one of three...

Malicious code in bnpl-blocks-mobile-bnpl-image-with-caption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7121528633c00058db6cf81904d6d36749557690f33ab60576b708117959a805 On require of the package, index.js loads polyfill.js which selects a platform-specific endpoint and downloads a binary over HTTPS from one of three...