Malicious code in bnpl-blocks-post-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5d8d3c9328912323fee5066e4c32c14904ec3e8b1800f66da0d1749babda0c On require, polyfill.js reconstructs attacker-controlled hostnames from string-split fragments oob-worker.cf103-070.workers.dev, with a DNS-TXT...

Malicious code in bnpl-blocks-mobile-bnpl-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf4f269562c9f3d9dd234e8c38b6d3408b636a4e743a6106dff730efce473ce On require of the package, index.js loads support.js, which selects a per-platform binary path, downloads bytes from a pool of obfuscated Cloudflare...

MAL-2026-13012 Malicious code in bnpl-blocks-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85856c1395372c88e148fdabb77be27f0556ad68ba3eb7f5c62d063a9154607 On require'bnpl-blocks-playwright', index.js loads bridge.js which downloads a platform-specific binary from obfuscated Cloudflare Workers subdomains...

Malicious code in bnpl-blocks-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85856c1395372c88e148fdabb77be27f0556ad68ba3eb7f5c62d063a9154607 On require'bnpl-blocks-playwright', index.js loads bridge.js which downloads a platform-specific binary from obfuscated Cloudflare Workers subdomains...

Malicious code in bnpl-blocks-scroll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a0a2e3786f50dc07b4546de5ae22f3a65ad50e95897b8ca4d0fa6460b32d63 On require of bnpl-blocks-scroll, index.js loads helpers.js, which selects a platform-specific payload path and fetches an opaque native executable v...

MAL-2026-13015 Malicious code in bnpl-blocks-scroll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a0a2e3786f50dc07b4546de5ae22f3a65ad50e95897b8ca4d0fa6460b32d63 On require of bnpl-blocks-scroll, index.js loads helpers.js, which selects a platform-specific payload path and fetches an opaque native executable v...

Malicious code in bnpl-blocks-mobile-bnpl-shopping-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc4c244c6348b8ac4006067e983f7a3a58a7d00c5356d10d8d452c02823d1e1 On require of the package, index.js loads init.js which selects a platform-specific endpoint, downloads an opaque binary from rotating Cloudflare...

MAL-2026-13017 Malicious code in bnpl-blocks-shops-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209f1c0883ce38bd482d809b83edd85e8d3db75a379909e1b47ee24562c49526 index.js is the declared main entry and unconditionally requires./setup.js on load. setup.js reconstructs attacker-controlled endpoints via...

MAL-2026-13019 Malicious code in bnpl-blocks-stories-of-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d298c1c7467e50e22e0822fb5a348773e76a2b06ab9028997578c3f1c86121 On require of this package, index.js loads bootstrap.js which downloads a platform-specific executable over HTTPS from a rotating list of...

Malicious code in bnpl-blocks-stories (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04845144f2e54662acd3413698e57b4efbbe44c47ddeb3c40c2fcc7383ae572c On require of the package, index.js loads./ext which reconstructs hardcoded hostnames via fragment-joined arrays e.g. oob-worker.cf99-9b3.workers.dev...

MAL-2026-13018 Malicious code in bnpl-blocks-stories (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04845144f2e54662acd3413698e57b4efbbe44c47ddeb3c40c2fcc7383ae572c On require of the package, index.js loads./ext which reconstructs hardcoded hostnames via fragment-joined arrays e.g. oob-worker.cf99-9b3.workers.dev...

MAL-2026-13030 Malicious code in boxy-add-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a91c45a1de3e17ac4c6595c6eac76736684ef353e3040a3e82b42e76911952 On require'boxy-add-script', index.js loads polyfill.js which reconstructs Cloudflare Worker hostnames from string-array fragments...

Malicious code in bnpl-blocks-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370e12396e25d7b72ad12f12c31c986e976bd8341f5fa61baa8cd3bb469f968e On require, index.js loads loader.js, which assembles a Cloudflare Workers hostname oob-worker.cf.workers.dev via runtime.join'' string reassembly,...

MAL-2026-13032 Malicious code in boxy-client-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8735372761caed8661ffa03152af889c344333a4bf71f4008e05016343bd7319 On require'boxy-client-loader', index.js loads platform.js which unconditionally invokes start: it fetches a platform-specific executable from...

Malicious code in boxy-adapter-tramvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20d5167abc8703b7b09a0d9698e6d0fd060f4378dfa11ab469af3e6805cfc8e On library load, index.js requires./runtime.js, which selects a platform-specific staging path, fetches an opaque binary from obfuscated Cloudflare...

MAL-2026-13028 Malicious code in boxy-adapter-tramvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20d5167abc8703b7b09a0d9698e6d0fd060f4378dfa11ab469af3e6805cfc8e On library load, index.js requires./runtime.js, which selects a platform-specific staging path, fetches an opaque binary from obfuscated Cloudflare...

MAL-2026-13020 Malicious code in bnpl-blocks-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5570ecd44264d28f2c2378da5c6cd23e562e696687adb01ab10b373c91e6560 On require of bnpl-blocks-types, index.js loads helpers.js which selects a platform-specific path /pkg/package, /pkg/package.exe, /pkg/loadermac,...

Malicious code in bnpl-blocks-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5570ecd44264d28f2c2378da5c6cd23e562e696687adb01ab10b373c91e6560 On require of bnpl-blocks-types, index.js loads helpers.js which selects a platform-specific path /pkg/package, /pkg/package.exe, /pkg/loadermac,...

Malicious code in bnpl-blocks-types-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de78304bd1becbc9d7c967d281a308b18da039554be722990596f528180454f5 On require'bnpl-blocks-types-gen', top-level code in index.js invokes setup in platform.js, which selects a platform-specific binary path, downloads...

MAL-2026-13021 Malicious code in bnpl-blocks-types-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de78304bd1becbc9d7c967d281a308b18da039554be722990596f528180454f5 On require'bnpl-blocks-types-gen', top-level code in index.js invokes setup in platform.js, which selects a platform-specific binary path, downloads...