Malicious code in chai-as-format (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97806af0cd2e189771ef929999ea4b1812c7933b87dbaf2a2a9b7e6815bce36c The package's index.js unconditionally requires./lib/config, which is a 4MB single-line file consisting of an obfuscator.io-style hex-encoded string...

MAL-2026-13246 Malicious code in bigops-products-timeline-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a98df74705a505fc378b760c3560eea108ccdce63e33c8733b56730efe324e The package advertises itself as shared primitive types with a trivial no-op class in index.js, but index.js unconditionally requires loader.js, whos...

Malicious code in ts-big-ecro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cc5687efdad86354f994af9fa7d7c28fbc21d7b5b4558870aba1c05dcf425b ts-big-ecro is a verbatim copy of the legitimate big.js library MikeMcl/big.js v7.0.1 with its name, repository field, and copyright preserved to...

MAL-2026-6199 Malicious code in ts-big-ecro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cc5687efdad86354f994af9fa7d7c28fbc21d7b5b4558870aba1c05dcf425b ts-big-ecro is a verbatim copy of the legitimate big.js library MikeMcl/big.js v7.0.1 with its name, repository field, and copyright preserved to...