Malicious code in dolyame-boxy-atom-bnpl-dolyame-button (npm)

Source: amazon-inspector c249dddf9e2ab4659fe99f1945e7b6dd832178da7b207fa86923d8c23ae60143 On require, adapter.js selects a platform-specific endpoint, fetches an opaque binary over HTTPS from one of several Cloudflare Workers mirrors oob-worker.cf100-416.workers.dev,...