Malicious code in dolyame-ui-draghoc (npm)

Source: amazon-inspector 9b2e12132d37505525293870b3a824831321d42adf75758e949b30139a002955 On require, index.js loads loader.js which selects a platform-specific asset path, fetches an unsigned binary over HTTPS from hostnames reassembled at runtime via array joins oob-worker.cf99-9b3.workers.dev,...