Malicious code in devplatform-api-v1-endpoint (npm)

Source: amazon-inspector f2ed0defa1fbae571985664baae47d89d796f943b249115eb73a38edce04fb6c On require, adapter.js selects a platform-specific asset path and fetches an executable from string-split-obfuscated hosts under oob-worker.cf10-.workers.dev, falling back to base64-encoded payload chunks...