Malicious code in claims-api-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 484891b513be8a69a5292810c211fd31bf54ad2a32c6f4899faafb1e7d31ef7e On require of claims-api-adapters, index.js unconditionally loads init.js, which invokes bootstrap at top level. bootstrap selects a platform-specifi...

MAL-2026-10626 Malicious code in @react-case/option (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4beffda94b8ea554f153faaf508da7906f78d821d45d2fca7b7b61180740269 The package's main entrypoint index.js is heavily obfuscated with a string-array + RC4-style decoder that reconstructs all API names and the target U...

Malicious code in chai-as-serialized (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e48e8980927471640c6573406d988d1a4361759f14a952da36c5daa1c9fd3c The package's main entry index.js spawns a detached node child process running lib/initializeCaller.js as a side effect of invoking the exported...