Malicious code in bigops-procedure-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e28923577eff8eba09d7ebbd941220727c1851cf46ef25f4de8960070ad33bb On require, index.js loads loader.js, which reconstructs delivery hostnames at runtime via array.join"" e.g. oob-worker.cf102-baf.workers.dev,...

Malicious code in bigops-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706ca9436cb98fc7516d9ccb15e8f55625b73575093bfe0933be786f54ba0667 The package presents itself as an ESLint config but on require unconditionally loads vendor.js, which selects a platform-specific asset, fetches a...