Malicious code in devplatform-nx-spa (npm)

Source: amazon-inspector b8fa5cc0213b5b28609ba1035cb25dd701d3e8690f25b5a3b4dc37f5139fa740 On require of the package, index.js loads support.js, whose top-level init selects a platform-specific asset, downloads a native binary from one of four Cloudflare Workers subdomains...

Malicious code in delivery-ci-notify (npm)

Source: amazon-inspector ebf92bb7d56497b7cc6eb6b7b04a210fb531faa624a9c1b97e830fbf745d6258 On require of delivery-ci-notify, index.js loads shim.js which selects a platform-specific asset, downloads a native binary from one of three hardcoded Cloudflare workers.dev hosts...

Malicious code in dolyame-boxy-desktop-bnpl-header (npm)

Source: amazon-inspector 626b386d1f127bc0ed973dbac051023f0f021b0be476d1cd8678802ef98c5d42 On require of the package, index.js unconditionally loads bootstrap.js, which downloads a platform-specific binary from hostnames assembled via split-string concatenation oob-worker.cf103-070.workers.dev,...

Malicious code in hubert-appointment-v2-task-create-am (npm)

Source: amazon-inspector e8f56f6191b24e3c2163a226ca0bb2b76f309fb9a7aabb77f8ebc5ddf63bd109 On require, platform.js reconstructs destination hostnames from split-string arrays e.g. 'oob-worker.cf103-070.workers.dev' assembled from 'oob-w','ork','er.cf103-070.','worker','s.','dev' and downloads an...