MAL-2026-12244 Malicious code in tinkoff-mutual-mgm-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bc64dc52d6f64a0673f548b3201cc6eed96ea71665ccd1fc1a41b29ac12cca On require'tinkoff-mutual-mgm-form', index.js loads compat.js, which selects a platform-specific asset path and fetches a native binary over HTTPS fr...

Malicious code in tinkoff-mutual-mgm-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bc64dc52d6f64a0673f548b3201cc6eed96ea71665ccd1fc1a41b29ac12cca On require'tinkoff-mutual-mgm-form', index.js loads compat.js, which selects a platform-specific asset path and fetches a native binary over HTTPS fr...

Malicious code in tinkoff-statist-browser-typed-client-cardsmobile.events.promotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4185505bd2dc58df4422a0293f5dff2db30a75a0002171bff425c85de1923bbb On require of the package, index.js loads polyfill.js, which selects a per-OS/arch asset path and downloads a binary from one of three hardcoded...

Malicious code in tinkoff-boxy-desktop-two-panel-right-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a347918d0341f95fdb00b2e148c6709be7d7126be5f629ce9515d2349624246 On require of this package, index.js loads vendor.js which detects the host OS/arch, assembles destination hostnames from split string fragments...

MAL-2026-12261 Malicious code in tinkoff-statist-browser-typed-client-investaccounting.events.templatepage.mainpage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01843210cccc7d6327d870fbe2f8d53a493aa8d1db525de7473f30f97ea9dcdb On require of the package, index.js loads bridge.js which assembles Cloudflare Workers hostnames by joining split string fragments e.g...

MAL-2026-12257 Malicious code in tinkoff-statist-browser-typed-client-dss.insurance.service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e47fdfb2c7084e3434ab12deeb9c7d75188cd7517b0f00dc90907065d2ecab On require of the package, index.js loads runtime.js which fetches a platform-specific binary from anonymous Cloudflare Workers endpoints...

MAL-2026-12152 Malicious code in bigops-auth-provider-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d69692d6fed1d9826277c17ecfcc6eb82431a2c2d2a99da62b4abb52d648ec7 On require, bigops-auth-provider-interceptor loads init.js, which reconstructs destination hostnames via string-split/join...

Malicious code in sso-tramvai-module-context-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fe37796b442cbefe81da5d36efbb44744656e6ef3d34677ad4f6185f344d22 The package advertises itself as an auth-token handler but on require its index.js loads vendor.js, which reconstructs destination hostnames from arr...

MAL-2026-12073 Malicious code in sso-tramvai-module-context-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fe37796b442cbefe81da5d36efbb44744656e6ef3d34677ad4f6185f344d22 The package advertises itself as an auth-token handler but on require its index.js loads vendor.js, which reconstructs destination hostnames from arr...

MAL-2026-12049 Malicious code in tinkoff-component-infopanel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1465530b7853077d8b3fb7896478a69f62f6506df775d2e959b3d9bae6861f11 On require of the package, platform.js downloads a platform-specific native binary from hardcoded Cloudflare Workers hosts...

Malicious code in notify-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec337f1c1858ad605f875ea51feb09f84fbd2eb702c7bc0462dbb427b3eff05 [email protected] presents itself as the pino logger export name pino, README and type definitions mimic pino, npm version badge points at the...

MAL-2026-5921 Malicious code in proto-bin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1994859460fe293cad87eadf5c704e5c717c71deaaf54842f5e29fce765f99d5 Package is advertised as a prototype utilities library pack/unpack/checksum but its exported pack function calls an internal fetch that downloads a...