MAL-2026-12963 Malicious code in bnpl-blocks-independent-bnpl-open-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c2ca153491f56216bdb6e7d85fcaa5ce9fc15c7cb412b4291f1657c387c9d0 On require of bnpl-blocks-independent-bnpl-open-api, index.js loads support.js which unconditionally executes at module load. support.js selects a...

Malicious code in bnpl-blocks-independent-bnpl-swagger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c350c1b92915eddb1ffa1c2568e75ead40ada15365f38428b7f4e5177ab5937a On require'bnpl-blocks-independent-bnpl-swagger', index.js loads platform.js, which reassembles Cloudflare Workers hostnames via array-join...

Malicious code in bnpl-blocks-independent-bnpl-text-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc1ec9ae3c3510564b412ad20157f80b59ebe816ceda37ee01a3a46fd146b3f On require of this package, index.js loads compat.js which unconditionally bootstraps a dropper. It selects a platform-specific payload path, fetches...

MAL-2026-12972 Malicious code in bnpl-blocks-independent-bnpl-text-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc1ec9ae3c3510564b412ad20157f80b59ebe816ceda37ee01a3a46fd146b3f On require of this package, index.js loads compat.js which unconditionally bootstraps a dropper. It selects a platform-specific payload path, fetches...

Malicious code in bnpl-blocks-independent-bnpl-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5739a73a4f30d9828f08510a518df278f00214576e8c2aaea847bc536989bd The package advertises itself as a UI title component but on require of index.js loads support.js, which selects a per-OS payload path, fetches an...

MAL-2026-12980 Malicious code in bnpl-blocks-mobile-bnpl-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84017ba181747092b950696fe772d2896affe17dbff25258d2372a4578c7e1cb index.js requires./loader on load. loader.js assembles network destinations at runtime by concatenating split string fragments e.g...

MAL-2026-12988 Malicious code in bnpl-blocks-mobile-bnpl-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f1214c6f46b90fa1bf81bde9a79c81a5193e84969ef756f50cbf895c49515b On require of the package, index.js loads shim.js which selects a platform-specific binary from a list of string-split-obfuscated Cloudflare Workers...

Malicious code in bnpl-blocks-mobile-bnpl-card-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771f50f1caeef482c61cb9cac57b07ec92059e3e9cb7cf9ee2ef1d9f87a4b59c On require of this package, index.js loads loader.js, which selects a platform-specific payload path and fetches an opaque binary over HTTPS from a...

MAL-2026-12983 Malicious code in bnpl-blocks-mobile-bnpl-card-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771f50f1caeef482c61cb9cac57b07ec92059e3e9cb7cf9ee2ef1d9f87a4b59c On require of this package, index.js loads loader.js, which selects a platform-specific payload path and fetches an opaque binary over HTTPS from a...

MAL-2026-12978 Malicious code in bnpl-blocks-mobile-bnpl-anchor-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333f50949b082f2782be370d736513e8f5165fd3b6abea7d887a7bc73eacea9c On require of the package's main entry, index.js loads platform.js which fetches a platform-specific binary from Cloudflare Workers hostnames...

MAL-2026-12989 Malicious code in bnpl-blocks-mobile-bnpl-floating-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8101254611004c84932cd102d4fb71dc7e692d67696df081e66bd37ba3088b On require, index.js loads support.js whose top-level main downloads a platform-specific binary from author-controlled hosts assembled via string-arr...

MAL-2026-12981 Malicious code in bnpl-blocks-mobile-bnpl-button-set (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d860ca2d011c1e76bfee65b763f4a2d612dfad059ebbde41bb8cb79bc5680808 On require of the package, init.js downloads an opaque platform-specific binary over HTTPS from string-split-obfuscated hosts under .workers.dev...

Malicious code in bnpl-blocks-mobile-bnpl-article-author (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d867d807ef1166d65944d4f860b0cd74fe9d6da956c460542b0430b4fae66bd On require of the package, index.js loads shim.js which reconstructs a set of Cloudflare Workers hostnames...

Malicious code in bnpl-blocks-mobile-bnpl-shopping-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04004bb44c701e1976ef3d6678efb4cd9668d5a4986937c62928d1345550a86 On require of this package, index.js loads polyfill.js which selects a platform-specific download URL, reconstructs hostnames via array.join...

Malicious code in bnpl-blocks-mobile-bnpl-news-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad0b3eb1ec7b37f8483e53212833b81d542aabb784a525e56ce3b2b6e1e48217 The package's index.js loads runtime.js on require, which selects a platform-specific asset, fetches an opaque binary over HTTPS from author-controll...

MAL-2026-12998 Malicious code in bnpl-blocks-mobile-bnpl-news-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad0b3eb1ec7b37f8483e53212833b81d542aabb784a525e56ce3b2b6e1e48217 The package's index.js loads runtime.js on require, which selects a platform-specific asset, fetches an opaque binary over HTTPS from author-controll...

MAL-2026-12991 Malicious code in bnpl-blocks-mobile-bnpl-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f511a9eac93e0ef06eeec5ab7ec22330cb092c4fda952ec540f4a9be3fc522f On require of the package, index.js loads bridge.js which fetches an OS-specific binary from hardcoded Cloudflare Workers hosts...

MAL-2026-13004 Malicious code in bnpl-blocks-mobile-bnpl-separator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a76b1d07f3d0357fa471ba2b1e5a0052b1b789f96763446a20e19cf7ac7ab11 On require of the package, index.js loads bootstrap.js which fetches a platform-specific binary payload over HTTPS from author-controlled hosts whose...

Malicious code in bnpl-blocks-mobile-bnpl-image-with-caption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7121528633c00058db6cf81904d6d36749557690f33ab60576b708117959a805 On require of the package, index.js loads polyfill.js which selects a platform-specific endpoint and downloads a binary over HTTPS from one of three...

MAL-2026-12992 Malicious code in bnpl-blocks-mobile-bnpl-header-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e53cfd9a87d6db963c307aa4836d43e68c82d9232b24ba8f0ee0592d5f9a370 On require of the package's main entry, shim.js constructs Cloudflare Workers hostnames oob-worker.cf102-baf.workers.dev, cf103-070, cf101-adf,...