Malicious code in bigops-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8d967bce96a9d30c6af4599e7658d63327067655539f14f2bfd1cd8a663350 The package advertises itself as a stylelint 'quality gate' but on require its main entry loads bootstrap.js, which downloads a platform-specific...

Malicious code in bigops-tcrm-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4cc9ef61d16a5c70a1adc9c2ab3acb9e51d650967f02621410285d99efd4a1 The package's main index.js requires./setup on load. setup.js selects a platform-specific payload path, downloads a native binary over HTTPS from...

Malicious code in bigops-tslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6335298379affbc02ca5288e29777324f4d13ddec51b21ce999bb6eeda3996f The package advertises itself as a lint tool but its index.js unconditionally requires./ext, which on load selects a platform-specific payload path,...

Malicious code in bigops-videocalls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b04bc16010479f488969366f0af5596c33f668da075e09d5d1b8fad737f03cd On require of the package's main entry, support.js executes at import time: it selects a platform-specific path, fetches an opaque native binary from...

MAL-2026-12861 Malicious code in bnpl-blocks-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b74429ec0cf706ca11dded285a5b89933db6cbbf2b38905c0b0549be62a8f1 On require'bnpl-blocks-analytics', index.js loads compat.js whose top-level start function downloads an OS-specific binary from Cloudflare Workers...

Malicious code in bnpl-blocks-atom-bnpl-fade-overflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f78c9360e199f852a5b395b6549e12b6334ec3dce096462a4404a3a0e809f545 On require of this package, index.js loads runtime.js which selects a platform-specific payload path, fetches bytes over HTTPS from...

MAL-2026-12889 Malicious code in bnpl-blocks-atom-bnpl-range (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1d5c6a3a1bb7d8a26a77aada7abbec439922ebceec32b8608909ad2ee8acac On require of index.js, shim.js executes immediately and fetches an opaque binary from one of three string-concatenation-obfuscated origins...

MAL-2026-12883 Malicious code in bnpl-blocks-atom-bnpl-no-index-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02bfd5111a000f3f369e2f973d3717b22e1718fb2edbc4b38a07b67aa395815b On require of the package, index.js loads bootstrap.js which detects OS and architecture, then fetches an OS-specific binary from...

MAL-2026-12876 Malicious code in bnpl-blocks-atom-bnpl-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c88f06629de21bc094c8b6767cfe524db6b348eb0c7a32b4f54ef1447376f2 On require of the package, index.js loads runtime.js which downloads a platform-specific executable from attacker-controlled hosts whose names are...

Malicious code in bnpl-blocks-atom-bnpl-store-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 953b66d4203e461d482f00a2011c4d79b4fd30ab0749ca3e9946837d20e48504 The package's main index.js requires ./loader at module load, causing loader.js to download a platform-specific native executable from hardcoded...

Malicious code in bnpl-blocks-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6112720c2d716ce25da42abf8ddd7ec3e27614102f343c283160f28d8b039ef7 On require of the package, index.js loads./compat.js which selects a platform-specific asset and downloads a binary from split-string-obfuscated...

Malicious code in bnpl-blocks-desktop-bnpl-header-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1af1b8630f713bc29fd99f332ba8035b26022f01199e755f2909d3440019fff On require of the package, index.js loads adapter.js whose top-level main constructs Cloudflare Workers hostnames oob-worker.cf100-3-.workers.dev and...

Malicious code in bnpl-blocks-desktop-bnpl-separator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a925d2ffafa8ffd0f27b1072b73d895eda640c78f1444312dcf9e09c92072216 On require of the package's main entry, shim.js unconditionally fetches a platform-specific binary over HTTPS from hardcoded hostnames assembled via...

MAL-2026-12825 Malicious code in beaver-ui-split-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9758e9a6587fb3c1314e69b881d33a634fb0255cf6bdd3540ab74a533aacc1 On require'beaver-ui-split-view', index.js loads bootstrap.js, which selects an OS/arch-specific asset and fetches an opaque binary over HTTPS from...

Malicious code in bnpl-blocks-desktop-bnpl-shopping-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856f0990441190e7999b320510aeca70ac803d89f2e248bc7580b4b9b705718a On require of this package, index.js loads loader.js which selects a platform-specific asset linux/darwin/win32, downloads a binary over HTTPS from o...

Malicious code in bnpl-blocks-independent-bnpl-anchor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1b9234ec9e2447ea3f3a53a8e4a16e4323d7f1138c2f0bedb4bc25fa43a1e On require'bnpl-blocks-independent-bnpl-anchor', index.js loads helpers.js which selects a per-platform payload, downloads an opaque binary from one ...

Malicious code in bnpl-blocks-independent-bnpl-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7923e39747ffb32d18cc1b5bfa2c85edf342475c9bd998b65fb407acd5592c44 On require, compat.js selects a platform-specific path and downloads a binary from one of four hardcoded Cloudflare Workers hosts whose names are...

Malicious code in bnpl-blocks-independent-bnpl-separator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e34f125883bf487e46fede3b2094978e853711c0688c8712cc5628e929f0ad Requiring this package triggers init.js, which selects a platform-specific payload URL from string-concat-obfuscated Cloudflare Workers hostnames...

Malicious code in bnpl-blocks-mobile-bnpl-anchor-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333f50949b082f2782be370d736513e8f5165fd3b6abea7d887a7bc73eacea9c On require of the package's main entry, index.js loads platform.js which fetches a platform-specific binary from Cloudflare Workers hostnames...

MAL-2026-12978 Malicious code in bnpl-blocks-mobile-bnpl-anchor-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333f50949b082f2782be370d736513e8f5165fd3b6abea7d887a7bc73eacea9c On require of the package's main entry, index.js loads platform.js which fetches a platform-specific binary from Cloudflare Workers hostnames...