Malicious code in chakra-ui-command-passport-kastra (npm)

Source: amazon-inspector 78aa8bda85f98b1e6f2ce18f280186996e1d6e9bf6b3e726f5bb83c5fa67937d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...