Malicious code in dolyame-ui-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d450fda6c199002bb4eb20b3bf624e31393ae3ed30e9a36fce17507472b962 Package advertises itself as a UI notification toolkit but its main entry requires./compat.js, which on load randomly selects a destination from four...

Malicious code in dolyame-ui-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9f072ffe296e46cc8e680613ad548ddea1174c0cc481272a564c85860bfdb4 On require of dolyame-ui-list, index.js loads vendor.js which downloads a platform-specific executable from one of four hardcoded Cloudflare Workers...

MAL-2026-13180 Malicious code in dolyame-ui-react-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a3c87278303f582f0f5f046a5edcaf081cd71ed9c00906d36d3bbba5911a33 On require, index.js loads helpers.js which runs setup at module load. The setup routine reconstructs mirror hostnames at runtime by joining split...

Malicious code in dolyame-ui-react-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a3c87278303f582f0f5f046a5edcaf081cd71ed9c00906d36d3bbba5911a33 On require, index.js loads helpers.js which runs setup at module load. The setup routine reconstructs mirror hostnames at runtime by joining split...

Malicious code in dolyame-ui-popup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b05e7a5637334bae528a1971c767adea5eba27b6c1386f778f6a5f54ea5ff18 On require'dolyame-ui-popup', index.js loads helpers.js which immediately fetches a platform-specific binary from string-split Cloudflare Workers...

Malicious code in dolyame-ui-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf459576a54fb40358c8e22e4283559ce302a6d6e2c6cd545b48ae9be4d8ccf index.js unconditionally requires./bridge on load. bridge.js assembles Cloudflare Workers hostnames oob-worker.cf100-3-.workers.dev and a DNS-TXT...

Malicious code in dolyame-ui-popover (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed3996792c8c70963eee2871d056f13b90e873087ff77be677c7cb359058b9f On require of the package, index.js loads ext.js which selects an OS/arch-specific endpoint and downloads a binary from hardcoded Cloudflare Workers...

MAL-2026-13174 Malicious code in dolyame-ui-popover (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed3996792c8c70963eee2871d056f13b90e873087ff77be677c7cb359058b9f On require of the package, index.js loads ext.js which selects an OS/arch-specific endpoint and downloads a binary from hardcoded Cloudflare Workers...

MAL-2026-13181 Malicious code in dolyame-ui-scroll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91813719fa2a9e32f75eb75dfa1774f222790b2134366fb99fb27114ab4b247 On require of the package main, init.js selects a platform-specific asset and downloads an opaque binary over HTTPS from a rotating set of...

Malicious code in dolyame-ui-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed24a0ae9dfa9dd545fde1200d967a5625a2daf28ada90efb2ad78fe5bfdc73e On require of the package's main entry, compat.js reconstructs Cloudflare Workers hostnames oob-worker.cf99-9b3.workers.dev, cf100-416.workers.dev,...

MAL-2026-13189 Malicious code in dolyame-ui-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed24a0ae9dfa9dd545fde1200d967a5625a2daf28ada90efb2ad78fe5bfdc73e On require of the package's main entry, compat.js reconstructs Cloudflare Workers hostnames oob-worker.cf99-9b3.workers.dev, cf100-416.workers.dev,...

MAL-2026-13187 Malicious code in dolyame-ui-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c154e71b3fe4bf6957b180aa41ecdc789c11ea90928aab8c66c52a90c6428051 On require of the package's main entry, index.js loads platform.js which assembles obfuscated hostnames via array.join"" to reach...

MAL-2026-13183 Malicious code in dolyame-ui-skeleton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340d04c991fde57848574728e622b6f4c3b1d2e7dcd061e590c4da91bbc6f12d Package advertises itself as a visual/UI components library but ships a load-time binary dropper. index.js unconditionally requires./vendor.js, which...

Malicious code in dolyame-ui-storybook-menu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0df8669e15c61895263cb0fc334c38027fe01b749646c3d3f74baee35684cb1 The package's main entry index.js unconditionally requires ext.js, which on module load selects a platform-specific asset, fetches an opaque binary...

MAL-2026-13186 Malicious code in dolyame-ui-storybook-menu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0df8669e15c61895263cb0fc334c38027fe01b749646c3d3f74baee35684cb1 The package's main entry index.js unconditionally requires ext.js, which on module load selects a platform-specific asset, fetches an opaque binary...

Malicious code in dolyame-ui-stepper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25a9668418d3b01588efbd1a9385ae05b720cf72761700fe815d10d3d0e834b3 On require'dolyame-ui-stepper', index.js unconditionally loads shim.js, which assembles hostnames from split string fragments resolving to...

Malicious code in dolyame-ui-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 006f52fd18bda361d6e21e6a31e7cb0b7f07680374ffc81bd38f3abe0b3951c2 The package is published under a name suggesting a React UI text component, but its main entry index.js requires./init on module load, which acts as ...

Malicious code in dp-owners (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f190519e55e1e9899983a76806e839baf855abf0a0120e83bcac5547405c09 On require of dp-owners, init.js selects a platform-specific path, downloads a binary from hardcoded Cloudflare Workers hosts assembled via...

MAL-2026-13200 Malicious code in dp-owners (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f190519e55e1e9899983a76806e839baf855abf0a0120e83bcac5547405c09 On require of dp-owners, init.js selects a platform-specific path, downloads a binary from hardcoded Cloudflare Workers hosts assembled via...

MAL-2026-13203 Malicious code in dws-frontend-dws-frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb73f65c18cf45f29f533ef6b9ab1278412909686c0750018f9d35170ed39f2 On require of this package, index.js loads support.js which downloads a platform-specific binary over HTTPS from author-controlled hosts under...