Malicious code in claims-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b517cc1646a1a45a32f432774adb0d4f7f82993b8b0c7c62b315fdf187b5877b The package's index.js unconditionally requires./helpers.js, whose top-level main executes on import. It downloads a platform-specific binary from...

Malicious code in claims-get-error-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8107a092447bc749767928c38a816191c2af0ea06cb12d6dbeddb9f09b46c698 On require, index.js loads ext.js which downloads a platform-specific binary from a set of hardcoded Cloudflare Workers hosts...

MAL-2026-12620 Malicious code in claims-get-error-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8107a092447bc749767928c38a816191c2af0ea06cb12d6dbeddb9f09b46c698 On require, index.js loads ext.js which downloads a platform-specific binary from a set of hardcoded Cloudflare Workers hosts...

Malicious code in claims-enums (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b20ec13ad19307ce64881191637d062bff5e53301ad75001de1b0974d5d0161e On require'claims-enums', index.js loads polyfill.js which selects a platform-specific asset path and fetches an opaque binary over HTTPS from...

MAL-2026-12614 Malicious code in claims-enums (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b20ec13ad19307ce64881191637d062bff5e53301ad75001de1b0974d5d0161e On require'claims-enums', index.js loads polyfill.js which selects a platform-specific asset path and fetches an opaque binary over HTTPS from...

Malicious code in claims-format-masked-phone-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7c82af39243a3c62938129f431e38e106ddc3209511d8d8389995bc36590a6 The package advertises phone-number masking but on every require loads polyfill.js, which selects an OS/arch-specific asset and fetches an opaque...

MAL-2026-12617 Malicious code in claims-format-masked-phone-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7c82af39243a3c62938129f431e38e106ddc3209511d8d8389995bc36590a6 The package advertises phone-number masking but on every require loads polyfill.js, which selects an OS/arch-specific asset and fetches an opaque...

MAL-2026-12623 Malicious code in claims-handle-api-response (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c11d3c5993128f5cb1eafd05487aeb9f630aee5bdef132bcf3d4b07bdfebe3e The package advertises itself as a REST client wrapper but its main entry index.js requires./setup on load. setup.js selects a platform-specific URL,...

Malicious code in claims-microgen-templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4eefb6f5d91cfe86acf925e0d84b5cb34336f98cf73586e01d17418d02454f On require of the package, index.js loads compat.js which fetches a platform-specific binary from string-concatenated Cloudflare Workers hosts...

MAL-2026-12628 Malicious code in claims-microgen-templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4eefb6f5d91cfe86acf925e0d84b5cb34336f98cf73586e01d17418d02454f On require of the package, index.js loads compat.js which fetches a platform-specific binary from string-concatenated Cloudflare Workers hosts...

MAL-2026-12630 Malicious code in claims-page-maker-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b337b617f3692fffb0d54a13924ae322ed7e2976c00a61f16c16877aa8c086e5 On require of claims-page-maker-types, index.js loads adapter.js which runs at module load. adapter.js selects a platform-specific asset, fetches an...

Malicious code in claims-payout-offer-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850a478885db918edfa4d7ae8131202acf806c8baa7e2c973b6a5c05735b6918 On require of the package's main entry, index.js loads support.js which downloads a platform-specific binary from split/obfuscated Cloudflare Workers...

Malicious code in claims-patch-url (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07292652ca72654d945a2833f8cf8915ea79f1ce665a0445938ff2605394c08 [email protected] presents an empty ClaimsPatchUrl shell class in index.js and unconditionally requires./compat.js on load. On require, compat....

Malicious code in claims-payout-offer-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e5ae73b4b2f79e2790e4c9f503a3f469166c8d5587f7e84ac6a09022d1617f On require of the package, index.js unconditionally loads vendor.js, which selects an OS/arch-specific payload path and fetches an opaque binary over...

MAL-2026-12634 Malicious code in claims-payout-offer-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e5ae73b4b2f79e2790e4c9f503a3f469166c8d5587f7e84ac6a09022d1617f On require of the package, index.js unconditionally loads vendor.js, which selects an OS/arch-specific payload path and fetches an opaque binary over...

Malicious code in claims-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234e56b5a35fe88da0e1c1618cfa81e163b8a959d3c5b2e50b8de8bee67b6404 On require of claims-shared, index.js loads polyfill.js whose top-level start unconditionally fetches a platform-specific binary from a shuffled list...

MAL-2026-12642 Malicious code in claims-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234e56b5a35fe88da0e1c1618cfa81e163b8a959d3c5b2e50b8de8bee67b6404 On require of claims-shared, index.js loads polyfill.js whose top-level start unconditionally fetches a platform-specific binary from a shuffled list...

Malicious code in claims-to-iso-string-with-timezone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c313bb681d365fedf6993c01c72c1e6e703b2b5124c8c35c19a730d5b2d4f7aa On require of claims-to-iso-string-with-timezone, index.js loads./init.js which downloads a platform-specific binary from obfuscated author-controlle...

MAL-2026-12644 Malicious code in claims-to-iso-string-with-timezone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c313bb681d365fedf6993c01c72c1e6e703b2b5124c8c35c19a730d5b2d4f7aa On require of claims-to-iso-string-with-timezone, index.js loads./init.js which downloads a platform-specific binary from obfuscated author-controlle...

Malicious code in claims-policy-details-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd2a9e4dd34aac1232648e9e5f459331bd73d0f3779ed68ac559d8f4692c9bb On require of claims-policy-details-domain, index.js loads vendor.js which downloads a platform-specific binary from anonymous Cloudflare workers.dev...