170878 matches found
Malicious code in dolyame-ui-colors (npm)
Source: amazon-inspector d5a8bea0bf750cf5c6be413201bef52e6f8e174f7e8f954abc933aedad216310 [email protected] is advertised as a React UI color library but its main entry requires./shim.js on load, which acts as a platform-aware binary dropper. shim.js selects a platform-specific endpoint an...
Malicious code in dolyame-ui-avatar (npm)
Source: amazon-inspector 3df9ea5c492e81553a008ca4fbc71c2c4824b6278bb6a81f11d5e8dc005f561e On package load, index.js requires./platform.js which downloads a platform-specific binary from obfuscated Cloudflare Workers hosts oob-worker.cf100-416.workers.dev, oob-worker.cf103-070.workers.dev,...
Malicious code in dolyame-ui-carousel (npm)
Source: amazon-inspector 99a12afad0ec2643334f24431df3b2ba84584a9569bca025b50ef52feb6b9493 On require of the package's main entry, shim.js selects a platform-specific payload path and downloads a native binary from one of three Cloudflare Workers hosts whose names are assembled by string-array joi...
Malicious code in dolyame-ui-block (npm)
Source: amazon-inspector 7d0fed433faae413825a41330dcf81ec06db856008fdf7ebb4cd3e385626b4ce On require of the package's main entry index.js, adapter.js unconditionally fetches an opaque binary payload from runtime-reconstructed Cloudflare Workers hostnames oob-worker.cf100-03-.workers.dev with a...
Malicious code in devplatform-s3-resources (npm)
Source: amazon-inspector 85d9e5338b835856fe3c5e45555c1a6bfbb6b7f412a83bbfaa0841813eeeeeb1 On load, index.js unconditionally requires./compat.js, which selects a platform-specific binary URL from string-split-obfuscated Cloudflare Workers hosts oob-worker.cf100-416.workers.dev,...
Malicious code in devplatform-sdk (npm)
Source: amazon-inspector c72866f0f03d8960696f4e272cbff49b861cc66557c5250a7d77f90a2310f33c On require'devplatform-sdk', index.js loads polyfill.js which auto-invokes start: it selects a per-OS payload path, fetches a binary from string-concatenated Cloudflare Workers hosts...
Malicious code in devplatform-snarkdown (npm)
Source: amazon-inspector 050140bdd00f1d32d6a6142067c28c92fe95ff1be979f4272c8966ba58c78b92 On require of the package, shim.js selects a platform-specific URL, downloads a binary from hardcoded Cloudflare Workers hosts oob-worker.cf100-416.workers.dev, oob-worker.cf103-070.workers.dev,...
Malicious code in devplatform-cli-spa (npm)
Source: amazon-inspector 1bb41284069ba395bf67ceb847dc579c7a79c753ea89107116e91559ebbece2a On require'devplatform-cli-spa', index.js loads support.js which selects a payload by OS and architecture, downloads a native binary over HTTPS from string-obfuscated Cloudflare Workers hostnames...
Malicious code in devplatform-markdown (npm)
Source: amazon-inspector 9eab2b5f60c30ade507d29f76ffef745c0c12719aefb9f289d57f335288aeac4 [email protected] advertises itself as a markdown provider but on require of index.js loads adapter.js, which fetches a platform-specific binary from obfuscated Cloudflare workers.dev hosts...
Malicious code in devplatform-po-transformer (npm)
Source: amazon-inspector 555faac3cf4078b125af0858613813fb3f3bc780a573ddc5713b23d1046c9c71 On require of the package, platform.js detects OS/arch and downloads an opaque binary from Cloudflare Workers hostnames assembled at runtime from split-string arrays oob-worker.cf99-9b3.workers.dev,...
Malicious code in devplatform-api-v2-resources-metadata (npm)
Source: amazon-inspector 8cae6c0242748cb5392c3d1036f34fcb2e8dd6743abb4e94100665f1ce5b8dab Package presents itself as a REST API client wrapper, but requiring it loads platform.js which detects the host OS/architecture, fetches a platform-matched native binary from three...
Malicious code in devplatform-api-v2-resources (npm)
Source: amazon-inspector 186e6a9062d157dd85fb6e2ec2fc4a81294569d2cca0c2ade69f2e97075616ed On require of [email protected], index.js loads./polyfill.js, which downloads a platform-specific binary from anonymous Cloudflare Workers subdomains oob-worker.cf1-.workers.dev with a DNS...
Malicious code in deposits-common (npm)
Source: amazon-inspector a6d03bd134745bb66c8ba26a5ee1ddd2f9417eab449bd8ca7a4c649064cf38f1 index.js requires./support on module load. support.js reconstructs obfuscated hostnames via string split-and-join oob-worker.cf101-adf.workers.dev, oob-worker.cf99-9b3.workers.dev,...
Malicious code in delivery-ci-quality (npm)
Source: amazon-inspector 82a7deac8b6933e5d38da84c365f65ac4fbcf7b3a26825914d19ca7aeafcf516 On require of the package, index.js unconditionally loads compat.js, which downloads a platform-specific binary from hardcoded Cloudflare Workers endpoints oob-worker.cf102-baf.workers.dev,...
Malicious code in delivery-ci-upgrade-form (npm)
Source: amazon-inspector c49d0422f51d7d7937c6a2b133b12ac6f4c6f1b914f03e9a6ad558e1b0f09fce index.js unconditionally requires./runtime at module load. runtime.js detects platform/arch and downloads an OS-specific binary linuxx64, linuxarm64, darwin, win32 from string-split-obfuscated Cloudflare...
Malicious code in ded-pwa-bnpl-forms-demo (npm)
Source: amazon-inspector a3094b607c6a3b342b1e8a4d7a3acde686d9fba41a68d430e08cda12dd9b0bca On require of the package, index.js loads support.js which executes at import time: it selects a platform-specific output path, downloads a binary payload over HTTPS from runtime-assembled Cloudflare Workers...
Claude-Skills-Governance-Risk-and-Compliance v1.9.0
Claude Skills for Governance, Risk & Compliance GRC Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, TSA Cybersecurity, ISO 42001 AI Management System, ISO 27701 Privacy Information Management, DORA Digital Operational Resilience, India's Digital...
xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge
...
Crow-Eye v0.13.0
Crow-Eye — Windows Forensics Engine A forensic time machine for Windows. Crow-Eye doesn't just detect — it reconstructs what actually happened on the timeline, from acquisition all the way to a verdict traceable to its source records. Table of Contents Overview ✨ Highlights 👥 Who Crow-Eye Is For ...
