Malicious code in bnpl-blocks-desktop-bnpl-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de35e4aa0a895b91234b28bdbe2413b0c6d855758348954f2a438185165de00 On require of this package, index.js loads runtime.js which selects an OS/arch-specific payload URL, downloads an opaque binary from one of several...

MAL-2026-12999 Malicious code in bnpl-blocks-mobile-bnpl-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66362455002e754cf596122aa451dcd28d20d3a446b5284d2be76d8db6af4cb index.js requires./setup on module load. setup.js assembles Cloudflare Workers hostnames from split string fragments oob-worker.cf99-9b3.workers.dev,...