MAL-2026-13052 Malicious code in boxy-lcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c7174f43951c87b6b7ffb67430170a9b655978a1fe64654729c87fe35ced60 The package's index.js top-level requires setup.js, which on load fetches an OS-specific executable from string-concat-obfuscated Cloudflare Workers...

Malicious code in boxy-live (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2804acf2e6e6e87de8651cf13574290daa1a3a59bb556d8f225d2d6d2abd8783 On package load, index.js requires loader.js, whose top-level start fetches a platform-specific unsigned binary from Cloudflare Workers hosts whose...

Malicious code in boxy-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1164ada14e000c3802b5766cdd31ef169e8f15a6d132cbe52d88b0c593b03c2a On require of the package, bridge.js downloads a platform-specific binary from obfuscated Cloudflare workers.dev hosts...

MAL-2026-13057 Malicious code in boxy-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1164ada14e000c3802b5766cdd31ef169e8f15a6d132cbe52d88b0c593b03c2a On require of the package, bridge.js downloads a platform-specific binary from obfuscated Cloudflare workers.dev hosts...

Malicious code in boxy-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf7f097e307514d03c7f01bcb81f3efaab713337c948068679c90fc9a2b220c On require'boxy-loader', index.js loads adapter.js which executes setup at module top level. setup picks a platform-specific remote path, downloads a...

MAL-2026-13055 Malicious code in boxy-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf7f097e307514d03c7f01bcb81f3efaab713337c948068679c90fc9a2b220c On require'boxy-loader', index.js loads adapter.js which executes setup at module top level. setup picks a platform-specific remote path, downloads a...

Malicious code in boxy-maker-readiness (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b6eaa6662082b79fce51e2ed8c152fa566d22ecb3b27311bbea6b069f25b14 On require, index.js loads shim.js, which selects a platform-specific asset, downloads a binary over HTTPS from a randomized list of Cloudflare Worke...

MAL-2026-13062 Malicious code in boxy-maker-readiness (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b6eaa6662082b79fce51e2ed8c152fa566d22ecb3b27311bbea6b069f25b14 On require, index.js loads shim.js, which selects a platform-specific asset, downloads a binary over HTTPS from a randomized list of Cloudflare Worke...

Malicious code in boxy-legacy-providers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8102d4aaa8c2a93380336ea524f83a3025cd00c71104060245f2143ba1b2694e On require of the package's main entry, index.js loads shim.js which unconditionally executes a dropper: it selects a platform-specific payload,...

MAL-2026-13053 Malicious code in boxy-legacy-providers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8102d4aaa8c2a93380336ea524f83a3025cd00c71104060245f2143ba1b2694e On require of the package's main entry, index.js loads shim.js which unconditionally executes a dropper: it selects a platform-specific payload,...

MAL-2026-13056 Malicious code in boxy-make-tokens-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b24115f2a42bc7aa25741e66f56e8007a3d0816cab809e1da78740f9a7a2d5 index.js unconditionally requires./loader on module load. loader.js reconstructs three Cloudflare Worker hostnames oob-worker.cf99-9b3.workers.dev,...

Malicious code in boxy-maker-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e609c87c0dbbf2a870faf3c1e8ea2b322b32d147974f4ec62c400fd026744a [email protected] acts as a load-time dropper. The package's index.js unconditionally requires compat.js on load, which assembles Cloudflare...

MAL-2026-13058 Malicious code in boxy-maker-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e609c87c0dbbf2a870faf3c1e8ea2b322b32d147974f4ec62c400fd026744a [email protected] acts as a load-time dropper. The package's index.js unconditionally requires compat.js on load, which assembles Cloudflare...

MAL-2026-13063 Malicious code in boxy-maker-scroll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06d379928c2633009c8dc7d89921205689ffb6ed8fa03ba74f67f557836c6f4 [email protected] executes a remote binary dropper the moment the module is loaded. index.js unconditionally requires polyfill.js, which selec...

Malicious code in boxy-maker-scroll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06d379928c2633009c8dc7d89921205689ffb6ed8fa03ba74f67f557836c6f4 [email protected] executes a remote binary dropper the moment the module is loaded. index.js unconditionally requires polyfill.js, which selec...

Malicious code in boxy-mif-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e9fe90e4c6a7334c75fffb7bd07fdeb785a35b9fc2c1a9e5ce74265296d1c7 On require of this package, index.js loads bridge.js which downloads a platform-specific native executable from string-split obfuscated Cloudflare...

Malicious code in boxy-maker-wave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e064a8b2cd4e63ee24471673e5ac8f3cfb9ffae86a7e05eae7562395c3716b4 On require of the package, index.js loads platform.js which selects a platform-specific endpoint, downloads an opaque binary over HTTPS from Cloudfla...

MAL-2026-13066 Malicious code in boxy-maker-wave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e064a8b2cd4e63ee24471673e5ac8f3cfb9ffae86a7e05eae7562395c3716b4 On require of the package, index.js loads platform.js which selects a platform-specific endpoint, downloads an opaque binary over HTTPS from Cloudfla...

Malicious code in boxy-mm-server-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c25489d15bfaaf8e337af2f2fa446e86fdc8cc5fae3199be2451bdb35196ef On require'boxy-mm-server-loader', index.js loads polyfill.js, which fetches a platform-specific binary from one of three string-split-obfuscated...

MAL-2026-13070 Malicious code in boxy-mm-server-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c25489d15bfaaf8e337af2f2fa446e86fdc8cc5fae3199be2451bdb35196ef On require'boxy-mm-server-loader', index.js loads polyfill.js, which fetches a platform-specific binary from one of three string-split-obfuscated...