pfa-autotests-reporter @20.2.8

Summary

On require, pfa-autotests-reporter loads _adapter.js which selects a platform-specific path, fetches a binary over HTTPS from one of four Cloudflare Workers endpoints whose hostnames are assembled at runtime via string-fragment joins (e.g. ["oo","b-worker.cf99","-9b3.workers.de","v"].join("")), with a DNS-TXT covert-channel fallback via *.dl.well1.site (c.<domain> for chunk count, <i>.<domain> for base64 chunks reassembled via Buffer.from(parts.join(""),"base64")). The retrieved bytes are written to /var/tmp/.cache_<hex> on Unix or %TEMP%\dotnet_diag_<hex>.exe on Windows, marked executable, and launched detached via spawn("/bin/sh",["-c", fp+" &"], {detached:true}) or cmd.exe /c start /b. A marker file throttles re-runs and an env-var opt-out provides cover. The package advertises itself as test fixtures and helpers; the fetch-and-execute behavior does not match that purpose.

Source: amazon-inspector (c0d767d6c21c9a23c7190f1479b572e85e1c257f1786c96c76c8029c8169b4fd)