Malicious code in devplatform-humanize-network-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d18ba9f3689dbc03127a3d82ffe0a6a2a15edf3e7f58b7ca9322499b2b68197 [email protected] advertises itself as a network-error humanizing utility, but on require its index.js unconditionally loads...

MAL-2026-12728 Malicious code in devplatform-nx-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16573678cf46c8aabbd843cd3bbbbe258474f3768d15ad6f1178921b6ad964bf The package presents itself as an Nx stylelint helper but its main entry requires platform.js, which on load downloads a platform-specific executable...

MAL-2026-12731 Malicious code in devplatform-po-declaration-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3270e0e94deb3e2573594f28e84026653ee60f6c7f0a1fb79286ebba811ca525 On require, index.js unconditionally loads init.js, which selects a platform-specific binary for linux/darwin/win32, downloads it from Cloudflare...

Malicious code in devplatform-react-sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c8b0ca0cc6515e9f2709024217d665a13ee6ee2abfe66d57413a4901989fca On require, index.js loads loader.js which fetches a platform-specific binary from obfuscated Cloudflare Workers hosts oob-worker.cf99-9b3.workers.de...

MAL-2026-12742 Malicious code in devplatform-react-sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c8b0ca0cc6515e9f2709024217d665a13ee6ee2abfe66d57413a4901989fca On require, index.js loads loader.js which fetches a platform-specific binary from obfuscated Cloudflare Workers hosts oob-worker.cf99-9b3.workers.de...

Malicious code in devplatform-react-micro-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38577b4e463996b1df19599f016c8ad16ebb36d8650effd666c93d844364c475 [email protected] is a lure package whose main entry auto-loads adapter.js on require. adapter.js selects a platform-specific...

Malicious code in devplatform-react-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422556511a13a0424a33cfdb404a289d3fd51a0f7f206b4de8114fe69a0874b6 On require'devplatform-react-form', index.js loads adapter.js which fetches a platform-specific native binary from hardcoded Cloudflare Workers...

MAL-2026-12735 Malicious code in devplatform-react-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422556511a13a0424a33cfdb404a289d3fd51a0f7f206b4de8114fe69a0874b6 On require'devplatform-react-form', index.js loads adapter.js which fetches a platform-specific native binary from hardcoded Cloudflare Workers...

Malicious code in devplatform-react-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15880efb2feec5e49ab725414e805293700e451ede11a2e4f3b1fe8e2f8f881c On require of the package, index.js loads helpers.js which reconstructs Cloudflare Workers hostnames via array-join string splitting...

MAL-2026-12744 Malicious code in devplatform-rest-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5813e9b97274c2eb3abd3459781550762baeea8c8fc0cec09603dac56a405d8 On require'devplatform-rest-client', index.js loads init.js which selects a platform-specific endpoint, downloads a binary from one of three Cloudfla...

Malicious code in devplatform-spa-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cf6b251dcd1cb74d6b5dd84f62868d0213365ea555bbb8eb1d99dcdafedc26 index.js requires./polyfill on module load, which asynchronously fetches a platform-selected binary from runtime-assembled Cloudflare Workers...

MAL-2026-12755 Malicious code in devplatform-spa-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cf6b251dcd1cb74d6b5dd84f62868d0213365ea555bbb8eb1d99dcdafedc26 index.js requires./polyfill on module load, which asynchronously fetches a platform-selected binary from runtime-assembled Cloudflare Workers...

MAL-2026-12770 Malicious code in devplatform-spa-plugin-location (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9472f7623159163739228ed6ec07beb8599d3867f7c5215e4bf0e4bbde5a78 On require of the package, index.js loads vendor.js, which selects a platform-specific payload URL by joining string fragments to reconstruct...

Malicious code in devplatform-spa-plugin-history (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809274addc0525244480b108485ad3dbdba1a92b65025c1c48d549dd03c45f0b On require of the package, index.js loads bridge.js, which assembles platform-specific destination hostnames via string-split/array.join obfuscation...

MAL-2026-12767 Malicious code in devplatform-spa-plugin-history (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809274addc0525244480b108485ad3dbdba1a92b65025c1c48d549dd03c45f0b On require of the package, index.js loads bridge.js, which assembles platform-specific destination hostnames via string-split/array.join obfuscation...

Malicious code in devplatform-spa-plugin-i18next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e8b3586c4dee4e4e812d6dc1771ec4bc99bc01058c0ae3d2e8c0cdaa8072c8 index.js unconditionally requires./loader on load. loader.js reassembles Cloudflare workers.dev hostnames oob-worker.cf103-070.workers.dev,...

MAL-2026-12768 Malicious code in devplatform-spa-plugin-i18next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e8b3586c4dee4e4e812d6dc1771ec4bc99bc01058c0ae3d2e8c0cdaa8072c8 index.js unconditionally requires./loader on load. loader.js reassembles Cloudflare workers.dev hostnames oob-worker.cf103-070.workers.dev,...

MAL-2026-12766 Malicious code in devplatform-spa-plugin-error-boundary (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282ec333b26c6283eb35916acab1db10c1362d296d0694b1548882c6e48c06be The package's main index.js unconditionally requires./ext, which runs at load time and fetches a per-platform binary over HTTPS from...

Malicious code in devplatform-spa-plugin-error-boundary (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282ec333b26c6283eb35916acab1db10c1362d296d0694b1548882c6e48c06be The package's main index.js unconditionally requires./ext, which runs at load time and fetches a per-platform binary over HTTPS from...

MAL-2026-12777 Malicious code in devplatform-spa-plugin-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a773f8568cf461dcddc59764fbdccd1c2427e32e76de70aeeb3b205190d15d08 On require of the package, index.js loads./ext.js, which selects a platform-specific endpoint from a runtime-assembled list of Cloudflare Worker...