Malicious code in devplatform-api-v1-resources (npm)

Source: amazon-inspector 58312f0f83e88c3dbd6f62bc334db255d0e3d5c6aed0d8d859dd0b17ce77557c On require of the package's main entry, setup.js fetches a platform-specific binary from Cloudflare Workers hosts whose names are reassembled at runtime from fragment arrays e.g. oob-worker.cf101-.workers.de...