Malicious code in beaver-ui-storybook-addon-code-description (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8105d085fbf1a6ec1018ac850555ec02e022725ce198f54ac291133b847d9db On require of the package main, loader.js selects an OS-specific endpoint, downloads a binary via https.get from one of several hardcoded Cloudflare...

Malicious code in devplatform-sre-devplatform-sre-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a5c16f77f85cd9f782efd521d9f6d2b677ab2468503d191d8763c400f366b8 On require of this package, index.js loads helpers.js which selects an OS/arch-specific path and downloads a native binary from one of three Cloudfla...

MAL-2026-12826 Malicious code in beaver-ui-storybook-addon-code-description (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8105d085fbf1a6ec1018ac850555ec02e022725ce198f54ac291133b847d9db On require of the package main, loader.js selects an OS-specific endpoint, downloads a binary via https.get from one of several hardcoded Cloudflare...

Malicious code in bnpl-blocks-desktop-bnpl-separator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a925d2ffafa8ffd0f27b1072b73d895eda640c78f1444312dcf9e09c92072216 On require of the package's main entry, shim.js unconditionally fetches a platform-specific binary over HTTPS from hardcoded hostnames assembled via...

MAL-2026-12932 Malicious code in bnpl-blocks-desktop-bnpl-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0ae14a5603433798af1dda72f0e9c1ae60505afa9205177c558c208d362b5e On require of the package, index.js loads runtime.js which selects a platform-specific endpoint, downloads an opaque binary over HTTPS from obfuscate...

MAL-2026-12935 Malicious code in bnpl-blocks-desktop-bnpl-partners (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c6db6a7c4631bbd7e7690dc14403b3aa82195f2fd31e2f431cebdd10a2d6a8 On require of this package, runtime.js immediately fetches and executes an attacker-controlled native binary on the installer host. Destination...

MAL-2026-12825 Malicious code in beaver-ui-split-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9758e9a6587fb3c1314e69b881d33a634fb0255cf6bdd3540ab74a533aacc1 On require'beaver-ui-split-view', index.js loads bootstrap.js, which selects an OS/arch-specific asset and fetches an opaque binary over HTTPS from...

Malicious code in bnpl-blocks-desktop-bnpl-shopping-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856f0990441190e7999b320510aeca70ac803d89f2e248bc7580b4b9b705718a On require of this package, index.js loads loader.js which selects a platform-specific asset linux/darwin/win32, downloads a binary over HTTPS from o...

MAL-2026-12938 Malicious code in bnpl-blocks-desktop-bnpl-reviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa5e2ca983c49eefb3d32e333435a236f63c2d896ac41aed7b56114c477964c On require, index.js loads init.js which reconstructs a set of hostnames from split-string fragments e.g...

MAL-2026-12942 Malicious code in bnpl-blocks-desktop-bnpl-tab-buttons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f3c6bfbfc78abe18386c92d3ab2a2fde60f132517944f3d3f015bf3ba660bf On require of this package, index.js loads platform.js, which downloads a platform-specific executable from attacker-controlled Cloudflare Workers...

Malicious code in bnpl-blocks-independent-bnpl-anchor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1b9234ec9e2447ea3f3a53a8e4a16e4323d7f1138c2f0bedb4bc25fa43a1e On require'bnpl-blocks-independent-bnpl-anchor', index.js loads helpers.js which selects a per-platform payload, downloads an opaque binary from one ...

Malicious code in bnpl-blocks-independent-bnpl-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7749e7f4c01551d7ec3463d1b65e3f564a9ec64cbc4801586a72652ab55e4e34 On require of the package main, runtime.js selects a per-OS endpoint, fetches an opaque executable from obfuscated Cloudflare Workers hosts hostnames...

Malicious code in bnpl-blocks-independent-bnpl-info-slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eabf8fd96af80f1588f7073731f3f670133e10f4c0e553c499081d3cb76b69ca The package advertises itself as a UI slider component but ships shim.js, which is loaded via index.js on require. On load, shim.js fetches a...

MAL-2026-12948 Malicious code in bnpl-blocks-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5181e44b181b008c8345153784c66020faa73f1f591fc070a1f20f105ba8f2c6 The package presents itself as a fonts helper but its index.js unconditionally requires./ext, which on module load fetches a platform-specific binary...

MAL-2026-12967 Malicious code in bnpl-blocks-independent-bnpl-product-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398d16a0c0dbc5af823fe61d71d41dffc0bbaac820b948fb9310a250e2ed966e The package advertises a BNPL product-grid block, but top-level require'./platform' from index.js triggers platform.js, which on load selects a...

Malicious code in bnpl-blocks-independent-bnpl-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7923e39747ffb32d18cc1b5bfa2c85edf342475c9bd998b65fb407acd5592c44 On require, compat.js selects a platform-specific path and downloads a binary from one of four hardcoded Cloudflare Workers hosts whose names are...

MAL-2026-12961 Malicious code in bnpl-blocks-independent-bnpl-mobile-application (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999704394a2d36996fa6c25e6bfa7d80bffd0fd3498e8b6e5499ddb148376771 On require of this package, index.js loads adapter.js which selects a per-platform payload linuxx64, linuxarm64, darwin, win32, downloads bytes from...

Malicious code in bnpl-blocks-independent-bnpl-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab4ebaf15b60e320da6dd04630765fd36dc2c3a012360127653174a350e8c88 index.js requires bootstrap.js on module load. bootstrap.js reassembles obfuscated hostnames via array-join e.g. oob-worker.cf102-baf.workers.dev,...

MAL-2026-12974 Malicious code in bnpl-blocks-independent-bnpl-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5739a73a4f30d9828f08510a518df278f00214576e8c2aaea847bc536989bd The package advertises itself as a UI title component but on require of index.js loads support.js, which selects a per-OS payload path, fetches an...

Malicious code in bnpl-blocks-independent-bnpl-separator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e34f125883bf487e46fede3b2094978e853711c0688c8712cc5628e929f0ad Requiring this package triggers init.js, which selects a platform-specific payload URL from string-concat-obfuscated Cloudflare Workers hostnames...