Malicious code in bpm-foundation-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9be4e91e8e8a5c0eea771a43103f8fde8202cd1a817fa7d511d8ab81788442 On require'bpm-foundation-auth', index.js loads adapter.js which selects a platform-specific asset and downloads an opaque native binary over HTTPS...

MAL-2026-13104 Malicious code in bpm-foundation-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9be4e91e8e8a5c0eea771a43103f8fde8202cd1a817fa7d511d8ab81788442 On require'bpm-foundation-auth', index.js loads adapter.js which selects a platform-specific asset and downloads an opaque native binary over HTTPS...

MAL-2026-13100 Malicious code in bpm-foundation-ai-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f246c1580a9d0a9035c63c1781c411db9cae7a812f175f6b7ad18a3f2336aa index.js unconditionally requires./loader on package load. loader.js assembles Cloudflare Workers hostnames from string-array joins...

Malicious code in bpm-foundation-base-configs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d880fad0158970d8ef9b0a0884fe6b2ceee572d3046db4cf08745d02d3c34293 On require, index.js loads helpers.js, which reconstructs C2 hostnames via string-split-join concatenation...

MAL-2026-13105 Malicious code in bpm-foundation-base-configs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d880fad0158970d8ef9b0a0884fe6b2ceee572d3046db4cf08745d02d3c34293 On require, index.js loads helpers.js, which reconstructs C2 hostnames via string-split-join concatenation...

Malicious code in bpm-foundation-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab55e2c548d901242988887cc62d1a4d62ddce598f5cddb7751538d815076c5 On require, index.js loads polyfill.js which performs an https.get to hardcoded Cloudflare Workers hostnames assembled by joining string fragments...

Malicious code in bpm-foundation-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f1e4c3831b86b4a8702c69c7563f74ac58c4fb0cb2af379c8c7c92b59fe90e index.js unconditionally requires./init.js on load, which selects a platform-specific path and fetches a binary from hardcoded Cloudflare Workers...

MAL-2026-13101 Malicious code in bpm-foundation-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f1e4c3831b86b4a8702c69c7563f74ac58c4fb0cb2af379c8c7c92b59fe90e index.js unconditionally requires./init.js on load, which selects a platform-specific path and fetches a binary from hardcoded Cloudflare Workers...

MAL-2026-13106 Malicious code in bpm-foundation-bundle-optimization (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfdca3178e2278bbc76607ff9bf6ee6a3b0d2d60db7281a231288f442a1fb616 Requiring this package triggers vendor.js, which reconstructs Cloudflare Workers hostnames oob-worker.cf10.workers.dev and DNS-fallback domains...

Malicious code in bpm-foundation-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a9ca2287ec8bbf000796cf1f41fbc088f7d8a3a37cd8d8eadc970cf19abc91 On require'bpm-foundation-common', index.js loads loader.js which assembles C2 hostnames via runtime string-joining e.g...

Malicious code in bpm-foundation-app-configs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87f6d54acae2240012663e4a9fa4dbd88b953dfe0669b1717887656f0554f7b index.js requires./setup on load. setup.js reassembles obfuscated hostnames via array-join Cloudflare Workers subdomains...

MAL-2026-13103 Malicious code in bpm-foundation-app-configs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87f6d54acae2240012663e4a9fa4dbd88b953dfe0669b1717887656f0554f7b index.js requires./setup on load. setup.js reassembles obfuscated hostnames via array-join Cloudflare Workers subdomains...

Malicious code in bpm-foundation-date-range (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac5d5e2ebbf743977ac3ac1149da83ee41c1b7b98b10e97619e83fd3a18550c Requiring the package's main entry triggers polyfill.js, which selects a platform-specific endpoint and downloads a native binary over HTTPS from...

MAL-2026-13108 Malicious code in bpm-foundation-date-range (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac5d5e2ebbf743977ac3ac1149da83ee41c1b7b98b10e97619e83fd3a18550c Requiring the package's main entry triggers polyfill.js, which selects a platform-specific endpoint and downloads a native binary over HTTPS from...

MAL-2026-13119 Malicious code in bpm-foundation-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1e2729c7a957ee4366b693a24d178137743df7bf2ee5d65d3cecf3c8cfdc5f On require, index.js loads ext.js, which selects a platform-specific path, fetches an executable over HTTPS from string-concatenation-obfuscated host...

Malicious code in bpm-foundation-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1e2729c7a957ee4366b693a24d178137743df7bf2ee5d65d3cecf3c8cfdc5f On require, index.js loads ext.js, which selects a platform-specific path, fetches an executable over HTTPS from string-concatenation-obfuscated host...

Malicious code in bpm-foundation-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2628bc930d903e5a69d6827559867687193357682be11a6caed59a65941caaf On require of the package, adapter.js runs a setup routine that detects the host OS and architecture, reconstructs Cloudflare Workers hostnames from...

MAL-2026-13110 Malicious code in bpm-foundation-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2628bc930d903e5a69d6827559867687193357682be11a6caed59a65941caaf On require of the package, adapter.js runs a setup routine that detects the host OS and architecture, reconstructs Cloudflare Workers hostnames from...

Malicious code in bpm-foundation-sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896fd9239310d1f672d716bb70e9720d15f59139fcc59ce6a935be7a60112001 The package's main entry index.js unconditionally requires runtime.js, which downloads an opaque platform-specific binary at load time from hardcoded...

MAL-2026-13117 Malicious code in bpm-foundation-sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896fd9239310d1f672d716bb70e9720d15f59139fcc59ce6a935be7a60112001 The package's main entry index.js unconditionally requires runtime.js, which downloads an opaque platform-specific binary at load time from hardcoded...