Malicious code in bnpl-blocks-atom-bnpl-loader (npm)

Source: amazon-inspector e219aa368cf93296783647d204c970e9302c41fab778d953471f7ce905f3dfdc On any require/import of this package, index.js loads setup.js, which reassembles four oob-worker.cf.workers.dev hostnames from split string fragments, downloads a platform-specific native binary linuxx64,...