Malicious code in dws-frontend-dws-frontend-core (npm)

Source: amazon-inspector 7fb73f65c18cf45f29f533ef6b9ab1278412909686c0750018f9d35170ed39f2 On require of this package, index.js loads support.js which downloads a platform-specific binary over HTTPS from author-controlled hosts under oob-worker.cf1.workers.dev with a DNS TXT-record base64 fallback...