MAL-2026-12546 Malicious code in checkout-cashback-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493f562fef163499ed128f94b588b857aa8016e563a6291459cfe79f0c8571b3 [email protected] silently requires bootstrap.js when the package is loaded. The bootstrap script assembles Cloudflare Workers subdomain...

Malicious code in checkout-bnpl-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb946cd5ee7a402bb9b542859d57d1e5dd876302ee39ceb8bd824f7b0067d18e The package advertises itself as a 'log transport' and exports a trivial Logger class from index.js, but index.js ends with require"./polyfill", whic...

MAL-2026-12545 Malicious code in checkout-bnpl-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb946cd5ee7a402bb9b542859d57d1e5dd876302ee39ceb8bd824f7b0067d18e The package advertises itself as a 'log transport' and exports a trivial Logger class from index.js, but index.js ends with require"./polyfill", whic...

MAL-2026-12555 Malicious code in checkout-desktop-cashback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ab0105316a6f7d59b244610cd7a5c702e2157987ca7b91674cd34d032acf70 On require'checkout-desktop-cashback', index.js loads vendor.js which fetches a platform-specific binary from obfuscated Cloudflare Workers endpoints...

MAL-2026-12547 Malicious code in checkout-checkout-test-block-aff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae29db4ecd6fc6c7250d5b388eb957c9b0d1ec2b8a8966928c3da7c31aa4bf87 On require of the main entry, index.js loads loader.js which downloads a platform-specific executable from hardcoded Cloudflare Workers hosts...

Malicious code in checkout-confirm-pos-order-sms-am (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8171a06586a3bfd6af6536dc201cd0ab277fd52dbc2d87df7b9d5d4d64ed70e On require of this package, index.js loads init.js which invokes init immediately. init downloads an opaque binary from hardcoded Cloudflare Workers...

MAL-2026-12549 Malicious code in checkout-confirm-pos-order-sms-am (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8171a06586a3bfd6af6536dc201cd0ab277fd52dbc2d87df7b9d5d4d64ed70e On require of this package, index.js loads init.js which invokes init immediately. init downloads an opaque binary from hardcoded Cloudflare Workers...

Malicious code in checkout-desktop-legal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7a07623c75a85bada6117a7a71f40d19924be192a769534e544ffe31f036b0 On require of checkout-desktop-legal, index.js loads compat.js, which selects a platform-specific asset path and downloads a binary from Cloudflare...

MAL-2026-12564 Malicious code in checkout-get-installment-client-agreement-am (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c89ae5bb381502715feea1642012fc1c9b388a46746b357a6d8f1348e876c9 On require of the package, init.js detects the host OS and architecture, assembles Cloudflare Workers hostnames from split string fragments e.g...

MAL-2026-12558 Malicious code in checkout-desktop-pay-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67636a6aeed1ed70d1bfd731fb8a845f67279b3afa82aa45b8e7a8ac9fe41cee On require of this package, index.js loads bootstrap.js which fetches a platform-specific binary from obfuscated Cloudflare Workers subdomains...

Malicious code in checkout-desktop-pay-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67636a6aeed1ed70d1bfd731fb8a845f67279b3afa82aa45b8e7a8ac9fe41cee On require of this package, index.js loads bootstrap.js which fetches a platform-specific binary from obfuscated Cloudflare Workers subdomains...

Malicious code in checkout-legal-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3515ded3bbec7c93c9544b3ad8dee138c5a41252dfc5dca9ff8f8854c088c5 On require of the package's main entry index.js - support.js, a bootstrap routine downloads a platform-specific executable from one of four hardcoded...

MAL-2026-12569 Malicious code in checkout-legal-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3515ded3bbec7c93c9544b3ad8dee138c5a41252dfc5dca9ff8f8854c088c5 On require of the package's main entry index.js - support.js, a bootstrap routine downloads a platform-specific executable from one of four hardcoded...

Malicious code in checkout-desktop-pay-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9f6914ba98b5cf6aa04dd51fb0ef5a1f454a0cb87409ea43482afd6b99b38d On require'checkout-desktop-pay-widget', index.js loads shim.js which selects a platform-specific asset, downloads an opaque native binary from one o...

MAL-2026-12559 Malicious code in checkout-desktop-pay-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9f6914ba98b5cf6aa04dd51fb0ef5a1f454a0cb87409ea43482afd6b99b38d On require'checkout-desktop-pay-widget', index.js loads shim.js which selects a platform-specific asset, downloads an opaque native binary from one o...

MAL-2026-12565 Malicious code in checkout-get-pos-documents-am (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df9be66ed22c321db8a9a0eace4736f23ed1f2d9b5cd0a28e8bbc38c7163098 On any require/import of checkout-get-pos-documents-am, index.js loads compat.js, which selects a per-platform binary linuxx64, linuxarm64, darwin,...

Malicious code in checkout-get-pos-documents-am (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df9be66ed22c321db8a9a0eace4736f23ed1f2d9b5cd0a28e8bbc38c7163098 On any require/import of checkout-get-pos-documents-am, index.js loads compat.js, which selects a per-platform binary linuxx64, linuxarm64, darwin,...

MAL-2026-12562 Malicious code in checkout-dolyame-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1762450e49c2a25e6765179edb585ba02fbc9375b72098fa0804ffae847ac2 On require of the package, index.js loads./runtime.js, which assembles mirror hostnames from split string arrays e.g...

Malicious code in checkout-input-card-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc552600295f6b008943a756a1cf29218d2e6d93a40dd72ea4cd06f039f80cb On require of the package, index.js loads vendor.js, which downloads a platform-specific binary from Cloudflare Workers subdomains...

MAL-2026-12567 Malicious code in checkout-input-card-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc552600295f6b008943a756a1cf29218d2e6d93a40dd72ea4cd06f039f80cb On require of the package, index.js loads vendor.js, which downloads a platform-specific binary from Cloudflare Workers subdomains...