Malicious code in dolyame-ui-checkbox (npm)

Source: amazon-inspector 2a445ffd0f222f7d58ad870ad641f9dd2fb21a1cc43795cbef5c58109cafebbe On require of the package, index.js loads vendor.js, which reconstructs a set of C2 hostnames from string-split fragments four .workers.dev mirrors and a .dl.wel1.ru DNS-TXT fallback, selects a per-platform...