MAL-2025-24338 Malicious code in kastra-gravity-oauth-hermes (npm)

The package kastra-gravity-oauth-hermes was found to contain malicious code...