Malicious code in devplatform-spa-plugin-notifier (npm)

Source: amazon-inspector 877337509f36ab52fcfb93d1dc48d77439a5154d077fc047b7263265cfb71468 On module load, index.js requires bootstrap.js which selects a platform-specific asset, downloads an opaque binary from hardcoded Cloudflare Workers subdomains oob-worker.cf101-adf.workers.dev,...