Malicious code in eclipse-aether-metalsmith-nconf (npm)

Source: amazon-inspector bb59dd9e7a3c9ce99968217dabaa8837c397eddb5066f0e0d7db5d2b38e1dfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview eclipse-aether-metalsmith-nconf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...