Malicious code in tinkoff-statist-web-typed-client-test.golden.retriever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352e7120bec31271d79af9befe17a46024f5785ffca010335fa13eb40c946e3a On require of the package, index.js loads init.js which reconstructs attacker-controlled hostnames via array-join string obfuscation four...

MAL-2026-12279 Malicious code in tinkoff-statist-web-typed-client-test.golden.retriever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352e7120bec31271d79af9befe17a46024f5785ffca010335fa13eb40c946e3a On require of the package, index.js loads init.js which reconstructs attacker-controlled hostnames via array-join string obfuscation four...

MAL-2026-12244 Malicious code in tinkoff-mutual-mgm-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bc64dc52d6f64a0673f548b3201cc6eed96ea71665ccd1fc1a41b29ac12cca On require'tinkoff-mutual-mgm-form', index.js loads compat.js, which selects a platform-specific asset path and fetches a native binary over HTTPS fr...

MAL-2026-12267 Malicious code in tinkoff-statist-browser-typed-client-mb.product.restrictions.arrestments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86cb27375f9846c6aeba581e7e7ec6112eefd54f8d743638a1e803bde3d46616 On require of the package's main index.js, loader.js selects a platform-specific endpoint and fetches an opaque native binary over HTTPS from a...

Malicious code in tinkoff-statist-browser-typed-client-eventea.projects.smartcam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf869ab3e355848cb77fff3b129c2fe0b80e01286fe28783a0e66e064cee87e On require of the package, index.js loads loader.js which downloads a platform-specific native binary from Cloudflare workers.dev endpoints whose...

MAL-2026-12260 Malicious code in tinkoff-statist-browser-typed-client-eventea.projects.smartcam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf869ab3e355848cb77fff3b129c2fe0b80e01286fe28783a0e66e064cee87e On require of the package, index.js loads loader.js which downloads a platform-specific native binary from Cloudflare workers.dev endpoints whose...

Malicious code in tinkoff-pfp-atom-styles-tiles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471d141c15ae867da45bf9c0f0802fa3c690c545184df894b96f1fcf61792c35 index.js unconditionally requires./ext inside a swallowed try/catch. ext.js is a platform-aware dropper: it constructs Cloudflare workers.dev hostnam...

Malicious code in pfp-forms-sme-registration-ooo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5effe78e8e38101fc7180664c8937bf9951a4c36f65c3e213b53ade88b3a648 On require of pfp-forms-sme-registration-ooo, index.js loads polyfill.js which selects a platform-specific asset path and fetches a native binary ove...

MAL-2026-12187 Malicious code in pfp-forms-sme-registration-ooo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5effe78e8e38101fc7180664c8937bf9951a4c36f65c3e213b53ade88b3a648 On require of pfp-forms-sme-registration-ooo, index.js loads polyfill.js which selects a platform-specific asset path and fetches a native binary ove...

MAL-2026-12159 Malicious code in bigops-cobrowsing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e81463953e6dde1f029deb6a15345c1f0e1a763e59c2f52e821c8e6f2d62f379 On require of the package's main entry, compat.js selects a per-OS asset path and downloads a native binary from one of three anonymous .workers.dev...

Malicious code in bigops-cobrowsing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e81463953e6dde1f029deb6a15345c1f0e1a763e59c2f52e821c8e6f2d62f379 On require of the package's main entry, compat.js selects a per-OS asset path and downloads a native binary from one of three anonymous .workers.dev...

Malicious code in bigops-chat-transfer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8d11b7e8abee5caddc5c2f1765fa7f10d40c8cce0ef1cafed55fe31537be94 On require of bigops-chat-transfer, platform.js reconstructs one of three Cloudflare workers.dev hostnames from split string fragments...

Malicious code in bigops-file-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4d23505ef5dd8a734e25b08b9b86a98bdf482482a2dbffcdf34f1467a2aa82 On require of bigops-file-storage, index.js loads vendor.js which selects a platform-specific asset path, fetches an opaque native binary over HTTPS...

Malicious code in bigops-frontend-bigops-frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb3c97636fded3935088ac125f923882844470f5638c45176b4254d4dbad714 On require of the package, vendor.js downloads a platform-selected native binary from hardcoded Cloudflare Workers hosts...

MAL-2026-12165 Malicious code in bigops-external-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c16bd7f21dc6d78b406fc39906d8cbb621072c638f84593871016f3b5ba5bae5 On require'bigops-external-auth', index.js loads adapter.js which downloads a platform-specific native binary from Cloudflare Worker hosts whose...

Malicious code in bigops-chats-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb764a83c5f69d414a640397df2acd34a25e83c8829a63040046661fd4e33a69 On require of the package, index.js loads init.js which performs OS/arch detection, downloads a native binary from hardcoded Cloudflare Workers...

MAL-2026-12158 Malicious code in bigops-chats-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb764a83c5f69d414a640397df2acd34a25e83c8829a63040046661fd4e33a69 On require of the package, index.js loads init.js which performs OS/arch detection, downloads a native binary from hardcoded Cloudflare Workers...

Malicious code in tinkoff-ui-action (npm)

Source: amazon-inspector c00c178eed539f0535846617d7201e635f073f5f6477d7c9e2d1a6ce53f68d36 On require of the package's main entry, compat.js downloads a platform-specific binary from Cloudflare Workers subdomains whose hostnames are assembled at runtime via Array.join to evade static analysis e.g...

Malicious code in tinkoff-component-infopanel (npm)

Source: amazon-inspector 1465530b7853077d8b3fb7896478a69f62f6506df775d2e959b3d9bae6861f11 On require of the package, platform.js downloads a platform-specific native binary from hardcoded Cloudflare Workers hosts oob-worker.cf99-9b3.workers.dev, oob-worker.cf100-416.workers.dev,...

Malicious code in platform-ui-island (npm)

Source: amazon-inspector e678a3a4d4b9e16e6d6223aaa0c6ccaca9b7f2ac95e47940af4e706548e0f111 The package's index.js unconditionally loads bridge.js on require. bridge.js downloads a platform-specific native binary from obfuscated Cloudflare Workers hosts oob-worker.cf101-adf.workers.dev,...