Malicious code in dolyame-ui-lazyrender (npm)

Source: amazon-inspector 7c406cc7b4d53676142db46c19a3e19211a3cc22fb01da79482ccb08cdddf419 On require of dolyame-ui-lazyrender, helpers.js selects a platform-specific binary path, fetches bytes over HTTPS from string-split-obfuscated oob-worker.cf99-9b3.workers.dev, oob-worker.cf101-adf.workers.de...

Malicious code in specials-obid-webpack (npm)

Source: amazon-inspector ef5ac97b682821ce99ff6152a28467cd5ec91903d061ba1fc70ef7a3e6b9be03 On require of the package, vendor.js selects a URL path by host platform, downloads a binary over HTTPS from destination hostnames assembled at runtime via array .join"" string-splits...