MAL-2026-12904 Malicious code in bnpl-blocks-atom-icon-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de37ae50b4a6878a2719938fddc4c705e82cbbc33d3d85dbe59462d91f0d53c5 On require of the package, index.js unconditionally loads compat.js, which selects a platform-specific output path Linux/Darwin: /tmp/.cache; Windows...

MAL-2026-12915 Malicious code in bnpl-blocks-desktop-bnpl-button-set (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7581057c70b3b5e805e0d56c30e74c4fc88c8c23aa0ceb73a46a2b17b937bb0 On require of the package, index.js loads polyfill.js which selects a platform-specific asset, fetches a binary from string-fragmented Cloudflare...

MAL-2026-12909 Malicious code in bnpl-blocks-data-schema-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e39c2d94a6114333c4275444d786188f00056a96e6e6296cd3abf275e3d5bc index.js unconditionally requires bootstrap.js, which on module load reconstructs Cloudflare Workers subdomains oob-worker.cf10x-xxx.workers.dev and...

MAL-2026-12908 Malicious code in bnpl-blocks-consts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7651f2c7c9ce4e13909a22f522b625f2bcf6825ced0641259c77e9d46ab56ede Package is advertised as a constants wrapper but requiring it loads polyfill.js, which on import asynchronously downloads a platform-specific...

MAL-2026-12905 Malicious code in bnpl-blocks-atom-image-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629920c8010c4cc8284a3698f4d748214d9ac784f67df8250ace5e656240ecb3 On require of the package, index.js loads setup.js which reconstructs attacker-controlled hostnames from split-string arrays...

MAL-2026-12914 Malicious code in bnpl-blocks-desktop-bnpl-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8ce63dd4b425c2f9650dd82df1d5b1f66ef56dd6f85ca6a99ff078f1f203b6 On require of the package, index.js loads support.js whose top-level init detects the host platform linuxx64, linuxarm64, darwin, win32, downloads a...

MAL-2026-12916 Malicious code in bnpl-blocks-desktop-bnpl-card-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d63ed62a217e197558ea54716acadb75a5a4c6a7b57545b5ec8c8d86abb656 On require, the package's main entry loads ext.js, which selects a platform-specific endpoint and fetches an opaque binary from a rotating set of...

MAL-2026-12923 Malicious code in bnpl-blocks-desktop-bnpl-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6823826cd3999be6c3dac95d5731bbce9bee98ae0b7df019a3b85c97fd5d1bad The package is advertised as a UI footer component but side-loads bridge.js on require. bridge.js selects a platform-specific asset linux/darwin/win3...

MAL-2026-12912 Malicious code in bnpl-blocks-desktop-bnpl-anchor-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f1356b6c4fb134c3e3a35f562fe646d5db925c24354f286159be061213013c On require of this package, bootstrap.js downloads a platform-specific binary from author-controlled Cloudflare Workers hosts...

MAL-2026-12924 Malicious code in bnpl-blocks-desktop-bnpl-grid-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f6433a65cdc6a8c5ce6486234ee3b6a17842ff9b51a9c33448a3dcf9dfcfd4d index.js unconditionally requires./setup.js, which on module load selects an OS/arch-specific asset path and downloads a binary from Cloudflare Worke...

MAL-2026-12920 Malicious code in bnpl-blocks-desktop-bnpl-faq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0028d1bea265a3e3fdcbbe1d43188f3aef4b4c332a995352c19ac5a090c42ac On require of the package, index.js loads support.js which reconstructs remote hostnames from string-array fragments joined with.join'' to defeat...

MAL-2026-12918 Malicious code in bnpl-blocks-desktop-bnpl-category-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a277db0429a37308bb1ce8f4d8f051e7be7b04cf8c327c10b967d9a7b17da75b The package's main entry unconditionally requires support.js, which at load time fetches a platform-specific native binary from obfuscated Cloudflare...

MAL-2026-12925 Malicious code in bnpl-blocks-desktop-bnpl-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b73a025a319c8c2af1d616239d0950f911030ae9760506d6090be908ca935 On require of this package, index.js loads bridge.js, which reconstructs C2 hostnames from split string fragments e.g...

MAL-2026-12930 Malicious code in bnpl-blocks-desktop-bnpl-info-slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8dabd39ff50be1e1295dea75e71b63acd26c7617be87af38df3cdbaaee53302 index.js loads support.js at require time, which fetches a platform-specific binary linux/darwin/win32 variants under /pkg/package, /pkg/loadermac,...

MAL-2026-12921 Malicious code in bnpl-blocks-desktop-bnpl-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a55a8b87f5fcabb03e7b44b8f85aafe3a6b8a6a1f8799305b21544055e99845 index.js requires./init on load. init.js downloads a platform-specific binary from string-split-obfuscated Cloudflare Workers hosts...

MAL-2026-12922 Malicious code in bnpl-blocks-desktop-bnpl-floating-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475a5832e13fe3f55a82c47aace786100dd62ae9c5c5d31e7408ac59930cc917 On require of the package, index.js loads helpers.js which downloads a platform-specific binary from Cloudflare Workers hosts whose domain strings ar...

MAL-2026-12919 Malicious code in bnpl-blocks-desktop-bnpl-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8ebc784cdc9c083f42cf6323e773eb7bf43b1b927c936c609bb8d93a90bb4cb On any require/import of this package, index.js loads ext.js which downloads a platform-specific binary over HTTPS from string-split-obfuscated...

MAL-2026-13255 Malicious code in bigops-storio-schematics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85f76938cd11389b3bd414591165194a80fb7188a92630a675a68c5cdb61202b index.js unconditionally requires runtime.js, whose top-level start function selects a platform-specific asset path, fetches an opaque binary from...

MAL-2026-12931 Malicious code in bnpl-blocks-desktop-bnpl-link-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3419412ce27e6f0442a6e828cf62c4f8851be28a969e977a799559e038c75ea7 On require of the package's main entry, index.js loads./vendor, which reconstructs Cloudflare Workers hostnames oob-worker.cf102-baf.workers.dev,...

MAL-2026-12926 Malicious code in bnpl-blocks-desktop-bnpl-header-catalog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d77aab31095b1d13ea26c5ca29398e01a205ed0766fe95d5d8978751ebd75e35 The package presents itself as a 'logging middleware' but its index.js unconditionally requires loader.js on module load. loader.js selects a per-OS...

MAL-2026-12927 Malicious code in bnpl-blocks-desktop-bnpl-header-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1af1b8630f713bc29fd99f332ba8035b26022f01199e755f2909d3440019fff On require of the package, index.js loads adapter.js whose top-level main constructs Cloudflare Workers hostnames oob-worker.cf100-3-.workers.dev and...

MAL-2026-12933 Malicious code in bnpl-blocks-desktop-bnpl-news-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c8c28332f033f4a53e19a9c2555f07d05be868631e953e2c3156b50ed2e397 On require, index.js loads shim.js which reconstructs C2 hostnames from split string arrays Cloudflare Workers subdomains...

MAL-2026-12929 Malicious code in bnpl-blocks-desktop-bnpl-image-with-caption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c639b4f00dd3629a927a4892681ebf399a957fe793132521d781bd9cc0ed0da On require of this package, index.js loads ext.js which selects a platform-specific asset name and downloads a native binary from obfuscated Cloudfla...

MAL-2026-12928 Malicious code in bnpl-blocks-desktop-bnpl-image-plus-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aafb685e5053ec62f01e6a0e837089ffbda1d9a7c22d1d7f80d23c510a564389 Requiring this package loads shim.js, which selects a per-platform payload path and fetches an unpinned, unsigned binary from one of three anonymous...

MAL-2026-12943 Malicious code in bnpl-blocks-desktop-bnpl-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a00a782a1b951d114dd07c4e2e5bf08226730274beb0b88842034b5c71e9dd On require of the package, index.js unconditionally loads adapter.js, which selects a payload URL based on OS/arch and downloads a binary from one of...

MAL-2026-12828 Malicious code in beaver-ui-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eaa4db154b26013412a01287354ef2f0ffb074b9bfd27c6e214fd60ddf4c9be The package's main index.js unconditionally requires./setup.js at load time. setup.js selects a platform-specific path, downloads an opaque native...

MAL-2026-12934 Malicious code in bnpl-blocks-desktop-bnpl-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de35e4aa0a895b91234b28bdbe2413b0c6d855758348954f2a438185165de00 On require of this package, index.js loads runtime.js which selects an OS/arch-specific payload URL, downloads an opaque binary from one of several...

MAL-2026-12940 Malicious code in bnpl-blocks-desktop-bnpl-shopping-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbec840b48cc522f6dcdda0ea3569cd85730d1fee219bd0b6ce46007917f61e On require, index.js loads support.js which selects a platform-specific asset path, downloads opaque bytes from Cloudflare Workers hosts whose names...

MAL-2026-12946 Malicious code in bnpl-blocks-desktop-large-bnpl-reviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52a16c390437bd38f791fca1380253d0e4e3056a1b1efd2af35f4fa95e22e28 On require of the package, index.js loads bridge.js which detects OS/arch and downloads a platform-specific binary from Cloudflare Workers hosts whos...

MAL-2026-12936 Malicious code in bnpl-blocks-desktop-bnpl-picture-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9e8a4f62e56d4797cc04c34f92cb55312f74de4980d98853210716f020ee76 On require of the package, runtime.js selects an OS/arch-specific asset path and downloads a native binary over HTTPS from string-split Cloudflare...

MAL-2026-13264 Malicious code in devplatform-sre-devplatform-sre-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a5c16f77f85cd9f782efd521d9f6d2b677ab2468503d191d8763c400f366b8 On require of this package, index.js loads helpers.js which selects an OS/arch-specific path and downloads a native binary from one of three Cloudfla...

MAL-2026-12826 Malicious code in beaver-ui-storybook-addon-code-description (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8105d085fbf1a6ec1018ac850555ec02e022725ce198f54ac291133b847d9db On require of the package main, loader.js selects an OS-specific endpoint, downloads a binary via https.get from one of several hardcoded Cloudflare...

MAL-2026-12939 Malicious code in bnpl-blocks-desktop-bnpl-separator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a925d2ffafa8ffd0f27b1072b73d895eda640c78f1444312dcf9e09c92072216 On require of the package's main entry, shim.js unconditionally fetches a platform-specific binary over HTTPS from hardcoded hostnames assembled via...

MAL-2026-12932 Malicious code in bnpl-blocks-desktop-bnpl-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0ae14a5603433798af1dda72f0e9c1ae60505afa9205177c558c208d362b5e On require of the package, index.js loads runtime.js which selects a platform-specific endpoint, downloads an opaque binary over HTTPS from obfuscate...

MAL-2026-12944 Malicious code in bnpl-blocks-desktop-bnpl-text-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4073d41c6f9c313ea3c3e26c01e9d8de4032797e7d6e80e51c214eb37c1969f9 On require of the package, platform.js selects a platform-specific endpoint and downloads an opaque binary from string-split obfuscated Cloudflare...

MAL-2026-12935 Malicious code in bnpl-blocks-desktop-bnpl-partners (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c6db6a7c4631bbd7e7690dc14403b3aa82195f2fd31e2f431cebdd10a2d6a8 On require of this package, runtime.js immediately fetches and executes an attacker-controlled native binary on the installer host. Destination...

MAL-2026-12825 Malicious code in beaver-ui-split-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9758e9a6587fb3c1314e69b881d33a634fb0255cf6bdd3540ab74a533aacc1 On require'beaver-ui-split-view', index.js loads bootstrap.js, which selects an OS/arch-specific asset and fetches an opaque binary over HTTPS from...

MAL-2026-12937 Malicious code in bnpl-blocks-desktop-bnpl-popup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be777645b47861c5f8e6bc2093eccac9543bfbc8c030e62bd69a54d4219ab52a The package's main entry loads init.js on require. init.js selects a platform-specific URL, assembles C2 hostnames at runtime via string-split/join t...

MAL-2026-12941 Malicious code in bnpl-blocks-desktop-bnpl-shopping-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856f0990441190e7999b320510aeca70ac803d89f2e248bc7580b4b9b705718a On require of this package, index.js loads loader.js which selects a platform-specific asset linux/darwin/win32, downloads a binary over HTTPS from o...

MAL-2026-12938 Malicious code in bnpl-blocks-desktop-bnpl-reviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa5e2ca983c49eefb3d32e333435a236f63c2d896ac41aed7b56114c477964c On require, index.js loads init.js which reconstructs a set of hostnames from split-string fragments e.g...

MAL-2026-12945 Malicious code in bnpl-blocks-desktop-bnpl-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b7a4e708d515244f25c6d9c5e01d39c6c6ae6fe47222e0305ef38bb9162eb0 The package's main entry index.js requires support.js on load. support.js selects a platform-specific path, then downloads a binary over HTTPS from...

MAL-2026-12947 Malicious code in bnpl-blocks-feature-partners (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f5d479d4fbf50975912fcbb27c8a3638cfeef78c8bd8a2e666162756abc788 index.js unconditionally require's./ext.js, which on load selects a platform-specific endpoint, fetches an opaque binary from Cloudflare Workers host...

MAL-2026-12942 Malicious code in bnpl-blocks-desktop-bnpl-tab-buttons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f3c6bfbfc78abe18386c92d3ab2a2fde60f132517944f3d3f015bf3ba660bf On require of this package, index.js loads platform.js, which downloads a platform-specific executable from attacker-controlled Cloudflare Workers...

MAL-2026-12952 Malicious code in bnpl-blocks-independent-bnpl-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063ad90855d7ee9b794ccc1e32a794000434fb6955e82152a4d4118ff8e3e266 On require of the package, index.js loads bridge.js which reconstructs attacker-controlled hostnames via array.join"" string splits...

MAL-2026-12950 Malicious code in bnpl-blocks-independent-bnpl-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d442b520a1779845bf9dc5d8a0cd822606ec46e0a01850143b93e14658cfe9 On require of the package, index.js unconditionally loads setup.js, which downloads an opaque binary from one of four hardcoded .workers.dev endpoint...

MAL-2026-12949 Malicious code in bnpl-blocks-independent-bnpl-anchor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1b9234ec9e2447ea3f3a53a8e4a16e4323d7f1138c2f0bedb4bc25fa43a1e On require'bnpl-blocks-independent-bnpl-anchor', index.js loads helpers.js which selects a per-platform payload, downloads an opaque binary from one ...

MAL-2026-12956 Malicious code in bnpl-blocks-independent-bnpl-features (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afeff40a463b598ac2764623ad9820714953bbb4a882848e4a2d68d1ec0a74fd On require of the package, index.js loads./bridge.js which reconstructs attacker-controlled hostnames from split string fragments...

MAL-2026-12955 Malicious code in bnpl-blocks-independent-bnpl-faq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fa2b8c94722055f1345a068fc74b842d0fe8120702208c73f2defd93744194 On require of this package, index.js loads runtime.js which downloads a platform-specific binary over HTTPS from obfuscated hosts...

MAL-2026-12951 Malicious code in bnpl-blocks-independent-bnpl-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7749e7f4c01551d7ec3463d1b65e3f564a9ec64cbc4801586a72652ab55e4e34 On require of the package main, runtime.js selects a per-OS endpoint, fetches an opaque executable from obfuscated Cloudflare Workers hosts hostnames...

MAL-2026-12954 Malicious code in bnpl-blocks-independent-bnpl-documents (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6696fe044c6853369150682d33490cf557f26081c7143ed87f7a3624dda53d On require of bnpl-blocks-independent-bnpl-documents, index.js loads support.js, which selects a platform-specific asset, fetches a native binary fro...