MAL-2026-12897 Malicious code in bnpl-blocks-atom-bnpl-store-button-set (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426cd2089d6b37d7f388aae2bafb56979692557475a20302f29ccd8bb00a064e On require of the package, index.js loads support.js which downloads a platform-specific binary from string-split-obfuscated Cloudflare Workers hosts...

MAL-2026-12900 Malicious code in bnpl-blocks-atom-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0bf90f9ba8f401c6300846c2e5fa3af2afd241fba5d967300272a8dc7eadec7 On require of bnpl-blocks-atom-container, index.js loads adapter.js which selects a platform-specific target path, downloads an opaque binary from on...

Malicious code in bnpl-blocks-atom-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0bf90f9ba8f401c6300846c2e5fa3af2afd241fba5d967300272a8dc7eadec7 On require of bnpl-blocks-atom-container, index.js loads adapter.js which selects a platform-specific target path, downloads an opaque binary from on...

Malicious code in bnpl-blocks-atom-bnpl-toggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b4cea9f3ecb85954dffb42aac8b9869e662493ae87815a7feb8c293e398b79 On require of the package, index.js loads./platform.js which fetches an opaque executable payload from obfuscated Cloudflare Workers hosts...

MAL-2026-12893 Malicious code in bnpl-blocks-atom-bnpl-skeleton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e88e9faf590414055ba1b7b48bdaa51df5e33735b9dd526e5d8d0650eceae7 On require of the package's main entry, init.js fetches a platform-specific binary from obfuscated Cloudflare Workers hostnames assembled by joining...

Malicious code in bnpl-blocks-atom-bnpl-skeleton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e88e9faf590414055ba1b7b48bdaa51df5e33735b9dd526e5d8d0650eceae7 On require of the package's main entry, init.js fetches a platform-specific binary from obfuscated Cloudflare Workers hostnames assembled by joining...

Malicious code in bnpl-blocks-atom-bnpl-store-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 953b66d4203e461d482f00a2011c4d79b4fd30ab0749ca3e9946837d20e48504 The package's main index.js requires ./loader at module load, causing loader.js to download a platform-specific native executable from hardcoded...

MAL-2026-12902 Malicious code in bnpl-blocks-atom-desktop-bnpl-highlighted-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2349ee7ea5e3f9098d665ff904b6dd6dba444d3f09c45654be5bfd56b8248960 On require of the package, index.js loads platform.js, which assembles destination hostnames at runtime from split-string arrays to hide them from...

Malicious code in bnpl-blocks-atom-desktop-bnpl-highlighted-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2349ee7ea5e3f9098d665ff904b6dd6dba444d3f09c45654be5bfd56b8248960 On require of the package, index.js loads platform.js, which assembles destination hostnames at runtime from split-string arrays to hide them from...

Malicious code in bnpl-blocks-atom-bnpl-star-rating (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06bdc5da391bdf16afb2eb1cc60461831dc1d7ede9fa817cc842795cb8d2ddda On require of the package's main entry, index.js loads shim.js which fetches a platform-specific binary payload dotnetdiag.exe on Windows, loadermac...

Malicious code in bnpl-blocks-desktop-bnpl-card-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a6a3ee94c8a00269c44eb09de0f4e5234a6df3a4081ec7fe0d0fa6ccd0b01e On require, index.js loads polyfill.js which selects a platform-specific payload path, downloads bytes over HTTPS from string-split-obfuscated...

MAL-2026-12917 Malicious code in bnpl-blocks-desktop-bnpl-card-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a6a3ee94c8a00269c44eb09de0f4e5234a6df3a4081ec7fe0d0fa6ccd0b01e On require, index.js loads polyfill.js which selects a platform-specific payload path, downloads bytes over HTTPS from string-split-obfuscated...

MAL-2026-12907 Malicious code in bnpl-blocks-component-story-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a797e2310dd4df10e11e104dad3fbb135621e9997a5425f480c3c884da59ca6d On require of this package, index.js loads polyfill.js which downloads a platform-specific executable from one of four hardcoded Cloudflare Workers...

Malicious code in bnpl-blocks-component-story-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a797e2310dd4df10e11e104dad3fbb135621e9997a5425f480c3c884da59ca6d On require of this package, index.js loads polyfill.js which downloads a platform-specific executable from one of four hardcoded Cloudflare Workers...

Malicious code in bnpl-blocks-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6112720c2d716ce25da42abf8ddd7ec3e27614102f343c283160f28d8b039ef7 On require of the package, index.js loads./compat.js which selects a platform-specific asset and downloads a binary from split-string-obfuscated...

MAL-2026-12906 Malicious code in bnpl-blocks-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6112720c2d716ce25da42abf8ddd7ec3e27614102f343c283160f28d8b039ef7 On require of the package, index.js loads./compat.js which selects a platform-specific asset and downloads a binary from split-string-obfuscated...

Malicious code in bnpl-blocks-desktop-bnpl-action-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a42e260d378e0b517e59b4656f10bb75ffe083a5f8431b4d6a908ec4dae0cb0 On require of the package's main entry, compat.js reconstructs Cloudflare Workers hostnames oob-worker.cf103-070.workers.dev,...

MAL-2026-12904 Malicious code in bnpl-blocks-atom-icon-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de37ae50b4a6878a2719938fddc4c705e82cbbc33d3d85dbe59462d91f0d53c5 On require of the package, index.js unconditionally loads compat.js, which selects a platform-specific output path Linux/Darwin: /tmp/.cache; Windows...

Malicious code in bnpl-blocks-atom-icon-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de37ae50b4a6878a2719938fddc4c705e82cbbc33d3d85dbe59462d91f0d53c5 On require of the package, index.js unconditionally loads compat.js, which selects a platform-specific output path Linux/Darwin: /tmp/.cache; Windows...

MAL-2026-12915 Malicious code in bnpl-blocks-desktop-bnpl-button-set (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7581057c70b3b5e805e0d56c30e74c4fc88c8c23aa0ceb73a46a2b17b937bb0 On require of the package, index.js loads polyfill.js which selects a platform-specific asset, fetches a binary from string-fragmented Cloudflare...