MAL-2026-13333 Malicious code in dolyame-boxy-independent-bnpl-tiles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4340fab762980b85544094ef1795fd82968bb58c7fe0f17a00f50b2df89b29d5 On require of the package, index.js loads setup.js, which reconstructs attacker-controlled hostnames by splitting string literals across arrays and...

Malicious Package

Overview dolyame-boxy-independent-bnpl-tiles is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...