Malicious code in bigops-jsonpath-mapper (npm)

Source: amazon-inspector 784552abf30d07bd647e0c3844dc45ea0205cf20c166ca1e38ef924c5fd999b7 On require of bigops-jsonpath-mapper, index.js loads bridge.js which assembles hostnames from string-array joins to hide the destinations oob-worker.cf99-9b3.workers.dev, cf101-adf.workers.dev,...