Malicious code in dolyame-ui-contenteditable (npm)

Source: amazon-inspector 9eaf7524b69f412cf3ba4a466c4b9ade04fcaafd989fd3ff0d437e0a3ec941d0 On require of the package, index.js unconditionally loads./compat.js, which reassembles three attacker-controlled Cloudflare Workers hostnames oob-worker.cf101-adf.workers.dev family from split string...