MAL-2026-13534 Malicious code in ded-pwa-c-boxy-di (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf51af402fad446e71b05e085b200e7892ee97e53f8f4593990d7f2b4979037 On require'ded-pwa-c-boxy-di', index.js loads loader.js, which selects a platform-specific remote endpoint hostnames assembled at runtime by joining...

Malicious code in devplatform-spa-plugin-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 697c6ca9c6aa1474e725b8f1c7d64c0b1809131ce1c8a856253db8d480791ff0 The package's main entry loads helpers.js which auto-invokes a start routine on require. That routine selects a platform-specific asset path, retriev...

Malicious code in bigops-voximplant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20e151930946a17e9bea02eb51c760264c27138792955452acc4231196ceaae On require of bigops-voximplant, index.js loads ext.js which downloads an OS/arch-specific binary from Cloudflare Workers subdomains whose hostnames...