Malicious code in dolyame-ui-slider (npm)

Source: amazon-inspector ba7c3d2ae4bea9c6638aa21727d88df65e96361021b4c5d458eac472191c0e86 On require'dolyame-ui-slider', index.js loads bootstrap.js which selects a platform-specific asset path, downloads an opaque binary from one of three Cloudflare Workers hosts oob-worker.cf100-416.workers.dev...