Malicious code in claims-payout-offer-api-adapters (npm)

Source: amazon-inspector 850a478885db918edfa4d7ae8131202acf806c8baa7e2c973b6a5c05735b6918 On require of the package's main entry, index.js loads support.js which downloads a platform-specific binary from split/obfuscated Cloudflare Workers hostnames oob-worker.cf103-070.workers.dev,...

Malicious code in claims-payout-offer-api (npm)

Source: amazon-inspector 249e26d075d4551f9259568bb4029db870432feca831cb4cf7d26ffb7318605b On require of the package, index.js loads polyfill.js which reconstructs C2 hostnames from split string fragments oob-worker.cf100-416.workers.dev, oob-worker.cf103-070.workers.dev,...