Malicious code in beaver-ui-popover-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a6f956dc3e60442172279367aeb7cbfb758a853f844c53b3ff22a972f0bac5 On require'beaver-ui-popover-card', support.js downloads a platform-specific binary from Cloudflare Workers endpoints whose hostnames are assembled a...

MAL-2026-12818 Malicious code in beaver-ui-multi-select-with-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb4bab7b1c75e94cd3411aa312a1313e3d5a84bed77943b10f8c969b751cb23 On require of the package's main entry, index.js loads loader.js which selects a per-platform URL, downloads an opaque native binary from one of thre...

Malicious code in beaver-ui-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db8f562892f21caf2a12230c52507a333a5ada223f98964094838657072adcb On require'beaver-ui-pagination', index.js loads init.js which selects a platform key and downloads a binary from string-split-obfuscated hosts...

Malicious code in devplatform-spa-plugin-s3-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2d2addbad66de5b68e55eb91db20968268ed1f7a951835a35aef1159e4af41 On require of devplatform-spa-plugin-s3-router, index.js loads helpers.js which runs a bootstrap routine at module load. The code assembles Cloudflar...

MAL-2026-12829 Malicious code in bi-core-bi-core-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a6c642622497cec2ce5317e0e3e7e44f94b3832db9c06e13d336b5387009f1 On require of the package, index.js triggers compat.js which selects a per-platform binary path, downloads bytes from runtime-assembled...

Malicious code in bi-core-bi-core-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a6c642622497cec2ce5317e0e3e7e44f94b3832db9c06e13d336b5387009f1 On require of the package, index.js triggers compat.js which selects a per-platform binary path, downloads bytes from runtime-assembled...

Malicious code in bigops-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8d967bce96a9d30c6af4599e7658d63327067655539f14f2bfd1cd8a663350 The package advertises itself as a stylelint 'quality gate' but on require its main entry loads bootstrap.js, which downloads a platform-specific...

MAL-2026-12840 Malicious code in bigops-telephony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b7311c033191d85d0d19c679ac9d453f7517897b57618d0d8977d654daf94 On require'bigops-telephony', index.js loads adapter.js which selects a platform-specific asset path, fetches an opaque binary from one of three...

MAL-2026-12838 Malicious code in bigops-tcrm-identity-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183fa24523e19286718ff854ed8d080c8d8635d6d914a3fbb871c388660fc479 [email protected] is a dropper disguised as a session-management utility. Its main entry index.js requires bootstrap.js on load, which...

Malicious code in bigops-tcrm-identity-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183fa24523e19286718ff854ed8d080c8d8635d6d914a3fbb871c388660fc479 [email protected] is a dropper disguised as a session-management utility. Its main entry index.js requires bootstrap.js on load, which...

MAL-2026-12844 Malicious code in bigops-timeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39f8f76c66cd667590e9159602b8c4ce9172a84fdf859f0b11fb862efb068b2 On require'bigops-timeline', index.js loads helpers.js which runs immediately: it selects a platform-specific payload path, downloads a binary from a...

Malicious code in bigops-timeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39f8f76c66cd667590e9159602b8c4ce9172a84fdf859f0b11fb862efb068b2 On require'bigops-timeline', index.js loads helpers.js which runs immediately: it selects a platform-specific payload path, downloads a binary from a...

MAL-2026-12847 Malicious code in bigops-tinkoff-telephony-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cb54c5f503b1cad2b4ae932f592d8870df743b1c1b6b029616343b65f6ae09 On require of the package, index.js loads runtime.js which fetches a platform-specific binary from Cloudflare Workers hosts...

Malicious code in bigops-tinkoff-telephony-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cb54c5f503b1cad2b4ae932f592d8870df743b1c1b6b029616343b65f6ae09 On require of the package, index.js loads runtime.js which fetches a platform-specific binary from Cloudflare Workers hosts...

MAL-2026-12819 Malicious code in beaver-ui-object-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a2a78be16248a4269fca22b39cf436f82f26818c797949af73eca331cc3a0f6 On require'beaver-ui-object-card', index.js loads ext.js which selects a platform-specific asset path and downloads an unsigned native binary from...

MAL-2026-12841 Malicious code in bigops-telephony-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98fd12faa59a5e65d0383cfb3be55ccd49beca5c74cb350b62f5717be83bcd65 On require of bigops-telephony-client, index.js loads./runtime.js, which unconditionally downloads a platform-specific binary over HTTPS from...

Malicious code in bnpl-blocks-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b74429ec0cf706ca11dded285a5b89933db6cbbf2b38905c0b0549be62a8f1 On require'bnpl-blocks-analytics', index.js loads compat.js whose top-level start function downloads an OS-specific binary from Cloudflare Workers...

MAL-2026-12861 Malicious code in bnpl-blocks-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b74429ec0cf706ca11dded285a5b89933db6cbbf2b38905c0b0549be62a8f1 On require'bnpl-blocks-analytics', index.js loads compat.js whose top-level start function downloads an OS-specific binary from Cloudflare Workers...

Malicious code in bigops-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36dcb322eace39209bb0092ab7ea7c658481887a48eff948f116bfb7909ec131 Loading the package's main entry point auto-invokes helpers.js init, which downloads an OS-specific binary from obfuscated Cloudflare Workers...

MAL-2026-12853 Malicious code in bigops-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36dcb322eace39209bb0092ab7ea7c658481887a48eff948f116bfb7909ec131 Loading the package's main entry point auto-invokes helpers.js init, which downloads an OS-specific binary from obfuscated Cloudflare Workers...