Malicious code in sme-rko-finance-front-operations-income (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7448e3b039f1a22821f5906a1b39378c1259cb5d98090c1b1b8176421482ec0a On require of the package, compat.js reconstructs attacker-controlled hostnames via array split-and-join obfuscation oob-worker.cf101-adf.workers.dev...

MAL-2026-12144 Malicious code in beaver-ui-drawer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ff4f4ef11d2ff4bbba6d98547a1f6c1e5834739b4943f581e057abb9e313ce [email protected] ships a postinstall script setup.js that assembles network destinations at runtime by joining split string fragments to hide...