Malicious code in claims-block-visibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6afd966a220b14c0d01a2132af36d206eee200ab806d61443b66379e560b324 On require'claims-block-visibility', index.js loads polyfill.js which unconditionally runs a setup routine that selects an OS-specific endpoint,...

Malicious code in claims-api-clients-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f8c902163c7dda0fc907a90fc4a71fbc08fcd1574e8cfcee53915674109a86 [email protected] advertises itself as a REST client wrapper, but index.js unconditionally requires shim.js, whose main runs on load. ...

MAL-2026-12613 Malicious code in claims-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75c174b3db5e2480eabc7c7f8ab5e8366737fac8e76086da13f8acac6545813 On require of the package, index.js loads ext.js, which reconstructs destination hostnames from string-split arrays e.g...

Malicious code in claims-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75c174b3db5e2480eabc7c7f8ab5e8366737fac8e76086da13f8acac6545813 On require of the package, index.js loads ext.js, which reconstructs destination hostnames from string-split arrays e.g...

MAL-2026-12616 Malicious code in claims-format-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776846029f9cb0fea6a6afd33178425861ef02c062754874b2a49ff078095efd [email protected] auto-executes a binary dropper when the module is required. index.js requires./init on load; init.js downloads a...

Malicious code in claims-get-base-url (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7b7dbbb58284ead0ecb4d93490e9683b4f58b31955d817de52495fb7399106 index.js requires./setup on load, so any require of this package triggers a dropper chain. setup.js selects a platform-specific payload path...

Malicious code in claims-create-client-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da539004d6a9ae666f733556ea55cc9ec81bd01efb27810f72f388cedcfc1d1 On require'claims-create-client-validator', index.js loads vendor.js whose top-level bootstrap fetches an OS/arch-specific native binary over HTTPS...

Malicious code in claims-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b517cc1646a1a45a32f432774adb0d4f7f82993b8b0c7c62b315fdf187b5877b The package's index.js unconditionally requires./helpers.js, whose top-level main executes on import. It downloads a platform-specific binary from...

MAL-2026-12611 Malicious code in claims-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b517cc1646a1a45a32f432774adb0d4f7f82993b8b0c7c62b315fdf187b5877b The package's index.js unconditionally requires./helpers.js, whose top-level main executes on import. It downloads a platform-specific binary from...

Malicious code in claims-enums (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b20ec13ad19307ce64881191637d062bff5e53301ad75001de1b0974d5d0161e On require'claims-enums', index.js loads polyfill.js which selects a platform-specific asset path and fetches an opaque binary over HTTPS from...

MAL-2026-12624 Malicious code in claims-historical-claims-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7434149cb83ab4bb1378b89c5fd8165ce08bf714df3258c0a4b2ba67940c997 index.js unconditionally requires loader.js on module load. loader.js reconstructs remote hostnames from split string fragments e.g...

Malicious code in claims-historical-claims-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7434149cb83ab4bb1378b89c5fd8165ce08bf714df3258c0a4b2ba67940c997 index.js unconditionally requires loader.js on module load. loader.js reconstructs remote hostnames from split string fragments e.g...

Malicious code in claims-historical-claims-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821551bfee1b6a8fa74b001808fad75327d22654f228600f02a6130edc31ce2e On require, index.js loads bridge.js which selects a platform-specific URL path and downloads a binary via https.get from hostnames assembled by...

MAL-2026-12625 Malicious code in claims-historical-claims-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821551bfee1b6a8fa74b001808fad75327d22654f228600f02a6130edc31ce2e On require, index.js loads bridge.js which selects a platform-specific URL path and downloads a binary via https.get from hostnames assembled by...

MAL-2026-12633 Malicious code in claims-payout-offer-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850a478885db918edfa4d7ae8131202acf806c8baa7e2c973b6a5c05735b6918 On require of the package's main entry, index.js loads support.js which downloads a platform-specific binary from split/obfuscated Cloudflare Workers...

MAL-2026-12627 Malicious code in claims-jira-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666343795502690c0582b4b73652c215ad8f5025ca586d255e94910e8dd59744 On require'claims-jira-service', index.js loads ext.js which downloads a platform-specific executable from author-controlled hosts assembled at runti...

Malicious code in claims-payout-offer-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e5ae73b4b2f79e2790e4c9f503a3f469166c8d5587f7e84ac6a09022d1617f On require of the package, index.js unconditionally loads vendor.js, which selects an OS/arch-specific payload path and fetches an opaque binary over...

MAL-2026-12632 Malicious code in claims-payout-offer-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 249e26d075d4551f9259568bb4029db870432feca831cb4cf7d26ffb7318605b On require of the package, index.js loads polyfill.js which reconstructs C2 hostnames from split string fragments oob-worker.cf100-416.workers.dev,...

Malicious code in claims-policy-details-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2500b36f91161fd5530acaf1ddc9c5af050b9d874dae9924f686f45f2dbe721 On require of the package, index.js loads loader.js which downloads a platform-specific binary from string-split-obfuscated hosts...

MAL-2026-12639 Malicious code in claims-policy-details-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2500b36f91161fd5530acaf1ddc9c5af050b9d874dae9924f686f45f2dbe721 On require of the package, index.js loads loader.js which downloads a platform-specific binary from string-split-obfuscated hosts...