MAL-2026-12910 Malicious code in bnpl-blocks-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50b0415c63c49a45364f4a287439682ce2b0d2b95a6fa250e8c01feff20c91f On require, support.js fetches a platform-specific binary from obfuscated hosts assembled by array-join fragments oob-worker.cf99-9b3.workers.dev...

Malicious code in bnpl-blocks-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6112720c2d716ce25da42abf8ddd7ec3e27614102f343c283160f28d8b039ef7 On require of the package, index.js loads./compat.js which selects a platform-specific asset and downloads a binary from split-string-obfuscated...

MAL-2026-12913 Malicious code in bnpl-blocks-desktop-bnpl-article-author (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80a4ff82e37de309fbc903891bd8ac770f0542251e9b4afc15fbd36e94ac21c On require, index.js loads shim.js, which fetches a platform-specific native executable from hardcoded hosts reconstructed at runtime via array .join...

Malicious code in bnpl-blocks-atom-icon-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de37ae50b4a6878a2719938fddc4c705e82cbbc33d3d85dbe59462d91f0d53c5 On require of the package, index.js unconditionally loads compat.js, which selects a platform-specific output path Linux/Darwin: /tmp/.cache; Windows...

MAL-2026-12915 Malicious code in bnpl-blocks-desktop-bnpl-button-set (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7581057c70b3b5e805e0d56c30e74c4fc88c8c23aa0ceb73a46a2b17b937bb0 On require of the package, index.js loads polyfill.js which selects a platform-specific asset, fetches a binary from string-fragmented Cloudflare...

MAL-2026-12908 Malicious code in bnpl-blocks-consts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7651f2c7c9ce4e13909a22f522b625f2bcf6825ced0641259c77e9d46ab56ede Package is advertised as a constants wrapper but requiring it loads polyfill.js, which on import asynchronously downloads a platform-specific...

Malicious code in bnpl-blocks-desktop-bnpl-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8ce63dd4b425c2f9650dd82df1d5b1f66ef56dd6f85ca6a99ff078f1f203b6 On require of the package, index.js loads support.js whose top-level init detects the host platform linuxx64, linuxarm64, darwin, win32, downloads a...

MAL-2026-12914 Malicious code in bnpl-blocks-desktop-bnpl-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8ce63dd4b425c2f9650dd82df1d5b1f66ef56dd6f85ca6a99ff078f1f203b6 On require of the package, index.js loads support.js whose top-level init detects the host platform linuxx64, linuxarm64, darwin, win32, downloads a...

Malicious code in bnpl-blocks-desktop-bnpl-card-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d63ed62a217e197558ea54716acadb75a5a4c6a7b57545b5ec8c8d86abb656 On require, the package's main entry loads ext.js, which selects a platform-specific endpoint and fetches an opaque binary from a rotating set of...

MAL-2026-12912 Malicious code in bnpl-blocks-desktop-bnpl-anchor-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f1356b6c4fb134c3e3a35f562fe646d5db925c24354f286159be061213013c On require of this package, bootstrap.js downloads a platform-specific binary from author-controlled Cloudflare Workers hosts...

Malicious code in bnpl-blocks-desktop-bnpl-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b73a025a319c8c2af1d616239d0950f911030ae9760506d6090be908ca935 On require of this package, index.js loads bridge.js, which reconstructs C2 hostnames from split string fragments e.g...

MAL-2026-12925 Malicious code in bnpl-blocks-desktop-bnpl-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b73a025a319c8c2af1d616239d0950f911030ae9760506d6090be908ca935 On require of this package, index.js loads bridge.js, which reconstructs C2 hostnames from split string fragments e.g...

Malicious code in bnpl-blocks-desktop-bnpl-info-slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8dabd39ff50be1e1295dea75e71b63acd26c7617be87af38df3cdbaaee53302 index.js loads support.js at require time, which fetches a platform-specific binary linux/darwin/win32 variants under /pkg/package, /pkg/loadermac,...

MAL-2026-12930 Malicious code in bnpl-blocks-desktop-bnpl-info-slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8dabd39ff50be1e1295dea75e71b63acd26c7617be87af38df3cdbaaee53302 index.js loads support.js at require time, which fetches a platform-specific binary linux/darwin/win32 variants under /pkg/package, /pkg/loadermac,...

Malicious code in bigops-storio-schematics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85f76938cd11389b3bd414591165194a80fb7188a92630a675a68c5cdb61202b index.js unconditionally requires runtime.js, whose top-level start function selects a platform-specific asset path, fetches an opaque binary from...

MAL-2026-12933 Malicious code in bnpl-blocks-desktop-bnpl-news-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c8c28332f033f4a53e19a9c2555f07d05be868631e953e2c3156b50ed2e397 On require, index.js loads shim.js which reconstructs C2 hostnames from split string arrays Cloudflare Workers subdomains...

Malicious code in bnpl-blocks-desktop-bnpl-image-with-caption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c639b4f00dd3629a927a4892681ebf399a957fe793132521d781bd9cc0ed0da On require of this package, index.js loads ext.js which selects a platform-specific asset name and downloads a native binary from obfuscated Cloudfla...

MAL-2026-12928 Malicious code in bnpl-blocks-desktop-bnpl-image-plus-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aafb685e5053ec62f01e6a0e837089ffbda1d9a7c22d1d7f80d23c510a564389 Requiring this package loads shim.js, which selects a per-platform payload path and fetches an unpinned, unsigned binary from one of three anonymous...

MAL-2026-12934 Malicious code in bnpl-blocks-desktop-bnpl-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de35e4aa0a895b91234b28bdbe2413b0c6d855758348954f2a438185165de00 On require of this package, index.js loads runtime.js which selects an OS/arch-specific payload URL, downloads an opaque binary from one of several...

Malicious code in bnpl-blocks-desktop-large-bnpl-reviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52a16c390437bd38f791fca1380253d0e4e3056a1b1efd2af35f4fa95e22e28 On require of the package, index.js loads bridge.js which detects OS/arch and downloads a platform-specific binary from Cloudflare Workers hosts whos...