Malicious code in inquirer-cli-spinner-antd (npm)

Source: amazon-inspector e42be817e5f64c4fcf3dbf7e0780556cf14e706cc97619487c5d0a41962fb9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in inquirer-cli-hermes-commitizen (npm)

Source: amazon-inspector 3e24b115a829d16b3956d1bc125c8001900849f9d2adfba59701f7f3a09299ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-112470

Malicious code in inquirer-cli-spinner-antd npm...

EUVD-2025-112471

Malicious code in inquirer-cli-hermes-commitizen npm...