Malicious code in devplatform-cli-contracts (npm)

Source: amazon-inspector 6bc9fcdf16d7e6c67e3dbc20a6e8bdec551687bc20fffa3c434a35ca387ffade On require of the package, index.js loads compat.js which reconstructs destination hostnames from split string arrays e.g. "oob-worker.cf100-416.worker","s.","dev".join"" and DNS-TXT fallbacks assembled from...