Malicious code in devplatform-cli-plugin-generator (npm)

Source: amazon-inspector e369efa925874a9e8d5b883567522eb39e0284122294d62a92358b0b937f256f On require of the package, index.js loads bootstrap.js, which reconstructs a list of Cloudflare Workers hostnames from split string fragments oob-worker.cf99-9b3.workers.dev, oob-worker.cf103-070.workers.dev...