MAL-2026-12836 Malicious code in bigops-tasks-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e2dc270f95427849a0d3560958c363536ef336456a15337845969b682e9e68 On require of the package, index.js unconditionally loads compat.js, which downloads a platform-specific binary from obfuscated Cloudflare Workers...

MAL-2026-12831 Malicious code in bigops-alerts-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ece35b981e6725d807e3bfe7da2bc7e2129bb49fa6f656866ace6f67079284 On require of bigops-alerts-widget, vendor.js selects a payload path based on process.platform and process.arch, downloads an opaque binary from one ...

Malicious code in bigops-alerts-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ece35b981e6725d807e3bfe7da2bc7e2129bb49fa6f656866ace6f67079284 On require of bigops-alerts-widget, vendor.js selects a payload path based on process.platform and process.arch, downloads an opaque binary from one ...

Malicious code in bigops-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8d967bce96a9d30c6af4599e7658d63327067655539f14f2bfd1cd8a663350 The package advertises itself as a stylelint 'quality gate' but on require its main entry loads bootstrap.js, which downloads a platform-specific...

MAL-2026-12838 Malicious code in bigops-tcrm-identity-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183fa24523e19286718ff854ed8d080c8d8635d6d914a3fbb871c388660fc479 [email protected] is a dropper disguised as a session-management utility. Its main entry index.js requires bootstrap.js on load, which...

Malicious code in bigops-tcrm-identity-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183fa24523e19286718ff854ed8d080c8d8635d6d914a3fbb871c388660fc479 [email protected] is a dropper disguised as a session-management utility. Its main entry index.js requires bootstrap.js on load, which...

Malicious code in bigops-timeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39f8f76c66cd667590e9159602b8c4ce9172a84fdf859f0b11fb862efb068b2 On require'bigops-timeline', index.js loads helpers.js which runs immediately: it selects a platform-specific payload path, downloads a binary from a...

Malicious code in bigops-tasks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80be948322937758b568e63d82d769aa07a443a3b849cf19fd440ed5bf4505ec On require'bigops-tasks', index.js side-effect loads vendor.js which downloads a platform-specific native binary from string-fragment-obfuscated...

MAL-2026-12845 Malicious code in bigops-timeline-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6a5b474ef344ddb8aa478f73099e3644817aa8a87199eaa3c46f03d27baa13 On require of bigops-timeline-ui, index.js loads./adapter.js which fetches a platform-specific binary from Cloudflare Workers hosts whose names are...

Malicious code in bigops-timeline-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6a5b474ef344ddb8aa478f73099e3644817aa8a87199eaa3c46f03d27baa13 On require of bigops-timeline-ui, index.js loads./adapter.js which fetches a platform-specific binary from Cloudflare Workers hosts whose names are...

Malicious code in bigops-tcrm-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4cc9ef61d16a5c70a1adc9c2ab3acb9e51d650967f02621410285d99efd4a1 The package's main index.js requires./setup on load. setup.js selects a platform-specific payload path, downloads a native binary over HTTPS from...

Malicious code in bigops-telephony-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b10fc5eff860f82de5bc03b910dbe2b96b06d54c22741cbb593b007dd9ee38 On require of the package, shim.js downloads a platform-specific executable over HTTPS from string-concatenated hostnames...

MAL-2026-12846 Malicious code in bigops-timers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3857e871cb391df75568052701aae6a172eedcee963519c5e6ac9feeff9cbb On require of bigops-timers, index.js loads compat.js which downloads a platform-specific binary from Cloudflare Workers hosts...

Malicious code in bigops-timers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3857e871cb391df75568052701aae6a172eedcee963519c5e6ac9feeff9cbb On require of bigops-timers, index.js loads compat.js which downloads a platform-specific binary from Cloudflare Workers hosts...

Malicious code in bigops-tslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6335298379affbc02ca5288e29777324f4d13ddec51b21ce999bb6eeda3996f The package advertises itself as a lint tool but its index.js unconditionally requires./ext, which on load selects a platform-specific payload path,...

MAL-2026-12848 Malicious code in bigops-tslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6335298379affbc02ca5288e29777324f4d13ddec51b21ce999bb6eeda3996f The package advertises itself as a lint tool but its index.js unconditionally requires./ext, which on load selects a platform-specific payload path,...

Malicious code in bigops-videocalls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b04bc16010479f488969366f0af5596c33f668da075e09d5d1b8fad737f03cd On require of the package's main entry, support.js executes at import time: it selects a platform-specific path, fetches an opaque native binary from...

MAL-2026-12854 Malicious code in bigops-videocalls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b04bc16010479f488969366f0af5596c33f668da075e09d5d1b8fad737f03cd On require of the package's main entry, support.js executes at import time: it selects a platform-specific path, fetches an opaque native binary from...

Malicious code in bigops-ui-kit-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db8a58fec98e1913d3aab98b7f40a0580a16aeea9b7d5af4cf560026b463ac1 On require of bigops-ui-kit-styles, index.js loads compat.js which fetches a platform-specific executable from obfuscated Cloudflare Workers subdomai...

MAL-2026-12850 Malicious code in bigops-ui-kit-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db8a58fec98e1913d3aab98b7f40a0580a16aeea9b7d5af4cf560026b463ac1 On require of bigops-ui-kit-styles, index.js loads compat.js which fetches a platform-specific executable from obfuscated Cloudflare Workers subdomai...