Malicious code in devplatform-spa-plugin-remote-module (npm)

Source: amazon-inspector 995f8b1091ff43f5fae824ef6ac028895003b9a24960b78449cbc7b295aa34fd On require of the package, index.js loads support.js which downloads a platform-specific binary from string-split-obfuscated hosts oob-worker.cf103-070.workers.dev, oob-worker.cf99-9b3.workers.dev,...