Malicious code in pfp-forms-sme-loan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 895bf0e3e06e148eff01868554fe9bfe615a4c611d07afa331acfcf23d094530 On require of the package, index.js loads bridge.js, which fetches a platform-specific binary from hardcoded Cloudflare Workers subdomains whose...

MAL-2026-4714 Malicious code in wdb-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05323f987b64131618be124040867a2acb216aef96952a6a3dfc11c615501500 package.json declares "preinstall": "./dist/runtime.node", causing npm to spawn the shipped file as an executable on every install on Linux. Despite...