Malicious code in boxy-live (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2804acf2e6e6e87de8651cf13574290daa1a3a59bb556d8f225d2d6d2abd8783 On package load, index.js requires loader.js, whose top-level start fetches a platform-specific unsigned binary from Cloudflare Workers hosts whose...

MAL-2026-12259 Malicious code in tinkoff-statist-browser-typed-client-eventea.projects.finhealthwebmicroblocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d381f80d9b2d3b310ab426d3c51996861b4c320f2926e53ea078da80e832a07 On require of this package, index.js loads vendor.js which downloads a platform-specific binary from runtime-assembled Cloudflare Workers hostnames...