Malicious code in devplatform-spa-plugin-i18next-instance (npm)

Source: amazon-inspector 0a8078abf02317c9e0c0255c48434f68798e80d2282d46acb8a8643e0cdb18c8 On require/import, index.js silently loads setup.js inside a try/catch. setup.js downloads a platform-specific binary from one of four hardcoded Cloudflare Workers hosts oob-worker.cf103-070.workers.dev,...