Malicious code in dwhetlfront-dwhetlfront-core (npm)

Source: amazon-inspector fad333b1a33066fabeca9799bee065c5d6431467699a187a25d6ef56a9cbea7f On require of the package, index.js loads support.js which selects a platform-specific payload URL, downloads bytes from Cloudflare workers.dev hosts oob-worker.cf100-3-.workers.dev with a DNS-TXT...