MAL-2026-13508 Malicious code in dolyame-ui-inputpassword (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe3efece732cd0eab0df9c3fa387540804b7a1f7a911a340c3852e7f2c54674 On require of the package, index.js loads lib/telemetry.js which, together with bootstrap.js, fetches a platform-specific binary from a rotating list...

MAL-2026-13066 Malicious code in boxy-maker-wave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e064a8b2cd4e63ee24471673e5ac8f3cfb9ffae86a7e05eae7562395c3716b4 On require of the package, index.js loads platform.js which selects a platform-specific endpoint, downloads an opaque binary over HTTPS from Cloudfla...

Malicious code in bigops-create-manifest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 027d25851cc38da61b10c0ce1d722d3e8455826d2f7866474432e98dd8f1b806 On require, index.js loads polyfill.js which selects a platform-specific endpoint, downloads an opaque native binary over HTTPS from one of several...