Malicious code in devplatform-spa-plugin-module (npm)

Source: amazon-inspector 638c4246220ea7f9a595c145c76940e7e060920ef251ab2c67ca814b9ab93378 On require of the package's main entry, polyfill.js executes init which reconstructs destination hostnames via array-join string splits e.g. "oob-worke","r.cf100-416.worker","s.","dev".join"", selects a...