Malicious code in jekyll-quark-sync-eclipse (npm)

Source: amazon-inspector fa7835916f3c4f8b37024734e440a3eb602cfc77184e289072d3fc20399511ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview jekyll-quark-sync-eclipse is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...