Malicious code in dolyame-boxy-atom-bnpl-dangerously-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ce2aa10d245536ed6cfd1903fe1b553eef84d8e949b0bd1b970817b7f13e98 On require of the package, index.js loads loader.js which reconstructs attacker-controlled hostnames via string-split.join'' to evade scanners mirror...

MAL-2026-12234 Malicious code in tinkoff-boxy-mobile-documents (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0975c5e634ca65495f0ec35088db60ae98702849f5f2fb31e2ad1d8eee2068b7 On require of the package, index.js loads./platform.js, which selects a per-platform payload path, fetches an unsigned binary over HTTPS from...