Malicious code in devplatform-jscodeshift-plugin (npm)

Source: amazon-inspector 92dcd946aaaf9b57795f9a94877df34a69ac39828620c58e2cf4b72cd7a9c253 On require, index.js loads loader.js, which reconstructs Cloudflare Workers hostnames from split string fragments e.g. 'oob-worke','r.cf101-a','df.workers.d','ev'.join'' and a DNS-TXT fallback channel via...