Malicious code in afisha-storybook-default (npm)

Source: amazon-inspector feeb75800892fc0387942008f2de2a7fe3c9088df88d596afc7e3d1466262c13 On require of the package, index.js loads setup.js which invokes lib/telemetry.js's runtime.run with a list of obfuscated mirror hosts package-proxy.cf.workers.dev, tin.dl.well1.site, tina.dl.well1.site,...