Malicious code in devplatform-po-loader (npm)

Source: amazon-inspector 185d53460e4ec6534c0b4c8f3de1c0eb2d0134eaf161d8e0211a46bca273ad69 On require, the package loads platform.js which selects a platform-specific path /pkg/package, /pkg/package-arm64, /pkg/loadermac, /pkg/package.exe, downloads a binary over HTTPS from obfuscated Cloudflare...