Malicious code in hermes-callback-equinox-magellan (npm)

Source: amazon-inspector b9eeae41056e9ee731f753077af2b0161fbdde4dba399081a1dad649ae59510a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview hermes-callback-equinox-magellan is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...