Malicious code in dolyame-ui-inputtag (npm)

Source: amazon-inspector b5f7fb3babc69bc0dbb80ecfe5c523d9aee1bbf2476331424ea57290985d0bf8 On require of the package's main entry, index.js loads init.js which downloads a platform-specific executable from hardcoded oob-worker..workers.dev endpoints, with a DNS-TXT chunked fallback over .dl.wel1.r...