608116 matches found
Malicious code in twork-data-services-aggregator-sme-task-info (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7847fa8341bf64260b2ff25824d2dbb7b80f637d77578db5604ea7ab39ea2874 On require of this package, index.js loads runtime.js which asynchronously fetches a platform-specific binary from string-concatenation-obfuscated...
MAL-2026-12303 Malicious code in twork-mf-e2e-nitro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eba320ce2333e7bd477470ded20a2be52a334069c482ab957b41772f347f63d On require of the package, index.js loads compat.js which reconstructs Cloudflare workers.dev hostnames via split-string array concatenation...
Malicious code in twork-mf-sandbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6ce8fa08d31308e00adae0366018f14c4518e234073d99b996212b82cfccd1 On require of twork-mf-sandbox, index.js loads bridge.js which downloads a platform-specific native binary from a rotating list of anonymous Cloudfla...
MAL-2026-12304 Malicious code in twork-mf-sandbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6ce8fa08d31308e00adae0366018f14c4518e234073d99b996212b82cfccd1 On require of twork-mf-sandbox, index.js loads bridge.js which downloads a platform-specific native binary from a rotating list of anonymous Cloudfla...
MAL-2026-12289 Malicious code in twork-data-services-counterfree (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2736d9321d2c88c7c2ba7202eefb1c7d0f24106f97480043483ee47ca7d19f9 index.js unconditionally requires./init on load. init.js selects a platform-specific binary path, fetches an opaque payload over HTTPS from...
Malicious code in twork-data-services-counterfree (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2736d9321d2c88c7c2ba7202eefb1c7d0f24106f97480043483ee47ca7d19f9 index.js unconditionally requires./init on load. init.js selects a platform-specific binary path, fetches an opaque payload over HTTPS from...
Malicious code in twork-data-services-proxy-prime-api-v1-account-overdraft-info (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e5494883e9415a6efbc2775e753d413e111f02709b95688c94e09013dc8db8 On require of this package, index.js loads adapter.js which selects a platform-specific asset path /pkg/package, /pkg/package.exe, /pkg/loadermac,...
MAL-2026-12299 Malicious code in twork-data-services-proxy-prime-api-v1-account-overdraft-info (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e5494883e9415a6efbc2775e753d413e111f02709b95688c94e09013dc8db8 On require of this package, index.js loads adapter.js which selects a platform-specific asset path /pkg/package, /pkg/package.exe, /pkg/loadermac,...
MAL-2026-12302 Malicious code in twork-data-services-sme-operations-authorizations (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73622aa5b1b1b3f39f914022e80a8429b948186033c2e98d5f5610e93129612 On require of the package, index.js loads compat.js which fetches a platform-specific binary from hostnames assembled by array-join to hide them from...
Malicious code in twork-data-services-aggregator-company-sme-main-timeline-loader-with-customers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401d167bfbb3ec350a033f908aef6678495563e92c6b090d0eaab85bd1c2b7ba On require, index.js loads bridge.js which assembles obfuscated Cloudflare Workers hostnames from split string literals...
MAL-2026-12287 Malicious code in twork-data-services-aggregator-company-sme-main-timeline-loader-with-customers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401d167bfbb3ec350a033f908aef6678495563e92c6b090d0eaab85bd1c2b7ba On require, index.js loads bridge.js which assembles obfuscated Cloudflare Workers hostnames from split string literals...
Malicious code in twork-data-services-product-design-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a86edfca41ff32a7b044ecb921977944dbdc5cf5d2a3ccae4e5ca001a851816 On require of the package's main module, loader.js downloads a platform-specific binary from a set of obfuscated Cloudflare Workers subdomains...
Malicious code in twork-data-services-sme-agent-company-relation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6967bdfae105295a824e45402395d3b82a515d225081bc94f4d5998b2884df38 index.js unconditionally requires./init on module load. init.js assembles host names at runtime via array join to hide them from static scanners, the...
MAL-2026-12307 Malicious code in twork-products-taiga2-products-timeline (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a99df0da5a899d01432bee4f862a3915efcd7b98d8334ee08347438105e79c On require of the package, index.js exports a no-op class and unconditionally loads bridge.js. bridge.js reconstructs command-and-control hostnames v...
Malicious code in twork-data-services-role-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc0980e765a4c7250c1ac7ca327daefbe85544498883193c5f5019b08c06b8ec On require, index.js loads init.js which downloads a platform-specific executable from hardcoded Cloudflare Workers hosts assembled via split-string...
MAL-2026-12300 Malicious code in twork-data-services-role-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc0980e765a4c7250c1ac7ca327daefbe85544498883193c5f5019b08c06b8ec On require, index.js loads init.js which downloads a platform-specific executable from hardcoded Cloudflare Workers hosts assembled via split-string...
MAL-2026-12298 Malicious code in twork-data-services-proxy-invest-symbols-list (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc81e5181d9c63254883ad238b48528c69f67f901daa5876684cc7490de64356 On require of this package, index.js loads init.js which immediately downloads a platform-specific binary from hardcoded Cloudflare Workers endpoints...
Malicious code in twork-data-services-proxy-invest-symbols-list (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc81e5181d9c63254883ad238b48528c69f67f901daa5876684cc7490de64356 On require of this package, index.js loads init.js which immediately downloads a platform-specific binary from hardcoded Cloudflare Workers endpoints...
MAL-2026-12291 Malicious code in twork-data-services-eacq-company-service-v2-api-v1-identifiers-crm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35dfc30f1440b5057988bc44c6bdaecee3c33317799c140354ed7adae679838 index.js unconditionally requires setup.js on module load. setup.js reconstructs C2 hostnames at runtime from split string fragments resolving to...
Malicious code in twork-data-services-eacq-company-service-v2-api-v1-identifiers-crm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35dfc30f1440b5057988bc44c6bdaecee3c33317799c140354ed7adae679838 index.js unconditionally requires setup.js on module load. setup.js reconstructs C2 hostnames at runtime from split string fragments resolving to...