Malicious code in bigops-plugin-notification-builder (npm)

Source: amazon-inspector 829800a4393389fef48ff06ea586a4892215acc428700193652bd1f3ce3f71b0 On require/import, index.js unconditionally loads bridge.js, which fetches a platform-specific binary from hardcoded, string-split-obfuscated Cloudflare Workers hosts oob-worker.cf102-baf.workers.dev,...