MAL-2026-13112 Malicious code in bpm-foundation-linters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7753fe48a070f467d11a5dfef041b6919ff9914df1484d0ef0e59c95f583961 On require of the package, index.js loads runtime.js which selects a per-platform payload path, fetches an opaque binary over HTTPS from one of three...

MAL-2026-13120 Malicious code in bpm-foundation-tcs-configs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a42f343712987873cf8ad18e70cc172666edc3b079149cae4d449ceadf2262 On require of the package, index.js loads adapter.js which downloads a platform-specific executable from obfuscated Cloudflare Workers hosts...

Malicious code in bpm-foundation-rate-us (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14633165714201c44b540cc6b04a1f9bd6c311e27ec921e3c0011d6696120d54 On any require/import of bpm-foundation-rate-us, index.js loads compat.js, which assembles hostnames from split string fragments to hide the...

MAL-2026-13115 Malicious code in bpm-foundation-rate-us (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14633165714201c44b540cc6b04a1f9bd6c311e27ec921e3c0011d6696120d54 On any require/import of bpm-foundation-rate-us, index.js loads compat.js, which assembles hostnames from split string fragments to hide the...

Malicious code in bpm-foundation-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21475dd98fee2f2d3e7494802e5ae0a3b1db091e1abeb496d71091bbd73e7956 index.js unconditionally requires runtime.js on module load. runtime.js selects a platform-specific endpoint /pkg/package, /pkg/package-arm64,...

MAL-2026-13111 Malicious code in bpm-foundation-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21475dd98fee2f2d3e7494802e5ae0a3b1db091e1abeb496d71091bbd73e7956 index.js unconditionally requires runtime.js on module load. runtime.js selects a platform-specific endpoint /pkg/package, /pkg/package-arm64,...

Malicious code in bpm-foundation-statist-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2310bf94b93817fc4e4614be54426a11718d280d078788920faa7c9f12d7d2 index.js unconditionally requires./support on module load. support.js constructs a rotated pool of Cloudflare Workers hostnames...

MAL-2026-13118 Malicious code in bpm-foundation-statist-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2310bf94b93817fc4e4614be54426a11718d280d078788920faa7c9f12d7d2 index.js unconditionally requires./support on module load. support.js constructs a rotated pool of Cloudflare Workers hostnames...

Malicious code in bpm-foundation-test-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fd53d190d78da3b8aef57cfd6df656093743bc766ecb0f212c464c74b88319 On require of the package, index.js loads bridge.js, which reconstructs Cloudflare Workers hostnames from split string fragments...

MAL-2026-12515 Malicious code in bpm-foundation-test-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de196f443359e53af966cb2ca288d90e59e708c2cf7ad33ab2e0e20b7df2869e On require, index.js loads setup.js which assembles destination hostnames at runtime from split string fragments resolving to...

Malicious code in bpm-foundation-test-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de196f443359e53af966cb2ca288d90e59e708c2cf7ad33ab2e0e20b7df2869e On require, index.js loads setup.js which assembles destination hostnames at runtime from split string fragments resolving to...

MAL-2026-12516 Malicious code in bpm-foundation-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731f1d13e5958a2b7954d0c472f56bae0663ebc6e0d0e1f2e7c080b70f124c73 index.js unconditionally requires./platform on load. platform.js selects a per-OS payload path, fetches bytes from one of three...

Malicious code in bpm-foundation-feature-flags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4736a188169920cb89859c87cc5d53ed9a51db4f368f15546f2b999a6ec12045 On require of bpm-foundation-feature-flags, index.js loads init.js which downloads a platform-specific native binary from obfuscated Cloudflare Worke...

MAL-2026-12343 Malicious code in bpm-foundation-feature-flags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4736a188169920cb89859c87cc5d53ed9a51db4f368f15546f2b999a6ec12045 On require of bpm-foundation-feature-flags, index.js loads init.js which downloads a platform-specific native binary from obfuscated Cloudflare Worke...

CVE-2019-2706: Undefined Security Weakness

Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware subcomponent: BPM Foundation Services. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...