Malicious code in checkout-input-card-logic (npm)

Source: amazon-inspector 1cc552600295f6b008943a756a1cf29218d2e6d93a40dd72ea4cd06f039f80cb On require of the package, index.js loads vendor.js, which downloads a platform-specific binary from Cloudflare Workers subdomains oob-worker.cf.workers.dev, hostnames assembled at runtime by joining string...