Malicious code in boxy-tree-providers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d9e378c994473ce3e3be434420e616cf1f9f4cf4c71c2b61091a2dffe34ca5 On any require/import of the package, index.js loads ext.js which reconstructs four Cloudflare Workers destinations oob-worker.cf.workers.dev via...