Malicious code in checkout-dolyame-logic (npm)

Source: amazon-inspector bf1762450e49c2a25e6765179edb585ba02fbc9375b72098fa0804ffae847ac2 On require of the package, index.js loads./runtime.js, which assembles mirror hostnames from split string arrays e.g. 'oob-wor'+'ker.cf99-9'+'b3.work'+'er'+'s.dev', 'oob-worker.cf102-baf.workers.dev',...

Malicious code in cardsmobile-data-utils (npm)

Source: amazon-inspector a5f06952752248dcbd4411398f97014f1fd133db0cb66bfeb2b7121a4f974feb On require of cardsmobile-data-utils, index.js loads./vendor.js, which downloads a platform-specific native executable over HTTPS from hardcoded Cloudflare Workers hosts oob-worker.cf103-070.workers.dev,...