Malicious code in sme-rko-finance-front-payments-domain (npm)

Source: amazon-inspector d8fcad12c3078bf2134f5e3cafd7ffa0ecf9f2bfec919533881d5c65b738b9fa On require of the package, index.js loads./polyfill.js which assembles a set of C2 hostnames from split string fragments via.join'' — resolving to oob-worker.cf99-9b3.workers.dev,...