Malicious code in devplatform-spa-plugin-module-loader (npm)

Source: amazon-inspector 902d3def6570c6efcdc3310f49ae60d22d25dce47bc8f6c8bb26292191c817a8 On require, index.js unconditionally loads platform.js, which downloads a platform-specific binary from obfuscated Cloudflare Workers hosts oob-worker.cf103-070.workers.dev, oob-worker.cf99-9b3.workers.dev,...

Malicious code in devplatform-spa-plugin-module (npm)

Source: amazon-inspector 638c4246220ea7f9a595c145c76940e7e060920ef251ab2c67ca814b9ab93378 On require of the package's main entry, polyfill.js executes init which reconstructs destination hostnames via array-join string splits e.g. "oob-worke","r.cf100-416.worker","s.","dev".join"", selects a...