Malicious code in checkout-dolyame-logic (npm)

Source: amazon-inspector bf1762450e49c2a25e6765179edb585ba02fbc9375b72098fa0804ffae847ac2 On require of the package, index.js loads./runtime.js, which assembles mirror hostnames from split string arrays e.g. 'oob-wor'+'ker.cf99-9'+'b3.work'+'er'+'s.dev', 'oob-worker.cf102-baf.workers.dev',...