Malicious code in devplatform-spa-plugin-s3-feature-toggle (npm)

Source: amazon-inspector 7574ec8653333519f651022c1d008eca37f884dc753ad8825cda3facdcd9aa61 On require of the package, index.js loads runtime.js which selects a platform-specific endpoint, downloads a binary over HTTPS from obfuscated Cloudflare Workers subdomains oob-worker.cf103-070.workers.dev,...