Malicious code in sme-rko-finance-front-payments-currency-payment-actions-operations-repeat-models (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c602d22e5a0f1d7cee18a98a7ce0b67e2c8440f7ff95330cb6c33d169f2e629 On require of the package, index.js loads support.js and lib/telemetry.js, both of which reconstruct the identifier 'childprocess' and destination...

MAL-2026-13596 Malicious code in dolyame-ui-progressline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e109a79a8ebbb2a7d21a37668b162bc92a5602ad24e7db6b6ce711f5cee152f6 On require, index.js loads shim.js which fetches a platform-specific binary from hardcoded Cloudflare Workers endpoints...

Malicious code in dolyame-ui-progressline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e109a79a8ebbb2a7d21a37668b162bc92a5602ad24e7db6b6ce711f5cee152f6 On require, index.js loads shim.js which fetches a platform-specific binary from hardcoded Cloudflare Workers endpoints...

Malicious code in dolyame-ui-postcsscustomproperties (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8be08d3eb5601ca7f7b5f74c34e3fd0ebba91f0b72dea8ab4b0642bb9695c0c On require of the package, shim.js and lib/telemetry.js reached via the main entry select a platform-specific payload, download a binary over HTTPS...

Malicious code in beaver-ui-popover-marker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44380c53af51645632593b0a86d93258bb71aecddc88d9ff3487a7906486e559 On require of the package, index.js loads vendor.js which runs a bootstrap routine that rotates through obfuscated Cloudflare Workers hosts...

MAL-2026-13523 Malicious code in beaver-ui-popover-marker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44380c53af51645632593b0a86d93258bb71aecddc88d9ff3487a7906486e559 On require of the package, index.js loads vendor.js which runs a bootstrap routine that rotates through obfuscated Cloudflare Workers hosts...

Malicious code in bigops-jsonpath-mapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784552abf30d07bd647e0c3844dc45ea0205cf20c166ca1e38ef924c5fd999b7 On require of bigops-jsonpath-mapper, index.js loads bridge.js which assembles hostnames from string-array joins to hide the destinations...

MAL-2026-13239 Malicious code in bigops-products-deposits (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f53755fd64cd249daeb83c1f148b5f4e600e4f59cc07cfa99fe6579992b0a9 On require of this package, index.js loads runtime.js which auto-invokes an init routine that selects a platform-specific endpoint, downloads a binar...

Malicious code in dolyame-boxy-mobile-bnpl-image-plus-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653c411e19cc545e0b3189f5bc2cc24b583b574fe661c27eeedae4f5f3372ecb The package's main entry index.js unconditionally requires vendor.js, which on load runs an async routine that selects a platform-specific payload UR...

MAL-2026-13125 Malicious code in dolyame-boxy-mobile-bnpl-image-plus-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653c411e19cc545e0b3189f5bc2cc24b583b574fe661c27eeedae4f5f3372ecb The package's main entry index.js unconditionally requires vendor.js, which on load runs an async routine that selects a platform-specific payload UR...

Malicious code in beaver-ui-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db8f562892f21caf2a12230c52507a333a5ada223f98964094838657072adcb On require'beaver-ui-pagination', index.js loads init.js which selects a platform key and downloads a binary from string-split-obfuscated hosts...

MAL-2026-12908 Malicious code in bnpl-blocks-consts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7651f2c7c9ce4e13909a22f522b625f2bcf6825ced0641259c77e9d46ab56ede Package is advertised as a constants wrapper but requiring it loads polyfill.js, which on import asynchronously downloads a platform-specific...

Malicious code in bnpl-blocks-independent-bnpl-items (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b068b10c6608e86812242f222c2936a85aae90776b6c71298731c16f8d7ae31 On require of this package, index.js loads runtime.js which selects a platform-specific asset, fetches an opaque binary from one of three obfuscated...

MAL-2026-12964 Malicious code in bnpl-blocks-independent-bnpl-origination (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7441b8e4b9daaaa54b9963006ffa7868dc6f2d7ffaa65b4c11a029c43240dde1 On require of the package's main entry, runtime.js downloads a platform-specific binary from Cloudflare Workers hosts whose names are reassembled at...

Malicious code in boxy-maker-skeleton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06892152f894a88b72854f0773f64e68336cf6726fd0acc4b3d83c87f06301d3 On require of boxy-maker-skeleton, index.js loads compat.js which reconstructs destination hostnames by string-splitting/join to hide them from stati...

MAL-2026-12577 Malicious code in checkout-mobile-legal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9d5aebe1a3868e44878f382e7dfd21bcbebf8767f3ff0890b2d6330726f945 On any require/import of this package, index.js loads init.js, which selects a platform-specific endpoint and downloads an opaque binary from...

MAL-2026-12604 Malicious code in claims-accounts-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a3c4efb40a47a58bad33fece7aad0799560c3af1722173078224d0f1c3ec7f index.js unconditionally requires./setup.js when the package is loaded. setup.js selects a platform-specific endpoint, downloads bytes from a rotated...

MAL-2026-12672 Malicious code in ded-aa-liza-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a328f8fbefe24a810c8fe1c0249029992137bec024cab060df03d88347b5185b On require of this package, index.js loads helpers.js which downloads a per-platform native executable linuxx64, linuxarm64, darwin, win32 from...

Malicious code in devplatform-api-v2-resource-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde262833260cbba75c5fdd2160e0f91a6c43c0f7ad202b44475c649772c1174 [email protected] is an import-time dropper. The package's main entry index.js requires compat.js, which on load assembles C2...

MAL-2026-12713 Malicious code in devplatform-humanize-network-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d18ba9f3689dbc03127a3d82ffe0a6a2a15edf3e7f58b7ca9322499b2b68197 [email protected] advertises itself as a network-error humanizing utility, but on require its index.js unconditionally loads...