Malicious code in delivery-ci-codeceptjs-fork (npm)

Source: amazon-inspector 5b04b71321d5c862e9bf8510e16b31cb4a78df5f06cd9c773265f7de475ebd06 On require of the package's main entry, runtime.js reconstructs attacker-controlled hostnames via Array.join string-splitting oob-worker.cf101-adf.workers.dev, oob-worker.cf103-070.workers.dev,...