Malicious code in devplatform-cli-plugin-test (npm)

Source: amazon-inspector 307cdf72132de0cbce8bbbe7fd65b7c89d9c879fd917ff6a9e06e41ff56d299e On require, runtime.js selects a platform-specific asset, downloads a binary over https.get from hardcoded Cloudflare Workers hosts with a DNS TXT base64 fallback under dl.wel1.ru, writes it to /var/tmp or...