Malicious code in devplatform-po-transformer (npm)

Source: amazon-inspector 555faac3cf4078b125af0858613813fb3f3bc780a573ddc5713b23d1046c9c71 On require of the package, platform.js detects OS/arch and downloads an opaque binary from Cloudflare Workers hostnames assembled at runtime from split-string arrays oob-worker.cf99-9b3.workers.dev,...