Malicious code in ded-pwa-test-pub-pkg (npm)

Source: amazon-inspector 1383d653a37b7e74a16850e3c1bf474ca310c0755505f3efd7f613ba0e553e08 On module load, index.js requires./compat.js which assembles remote hostnames from split string literals e.g. "oob-worker.cf1","00-416.w","orkers",".dev".join"" and additional .workers.dev variants plus a...