EUVD-2025-179177

Malicious code in electron-superflare-quantumfoam-inquirer npm...

MAL-2025-187493 Malicious code in inquirer-winston-commitlint-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d8803b934bddaa10af678e2f1095520a0c5df75893b63ef2fb45b3564318c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-antares-ursa-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d65cea319abb6430e6df11d60acefaed5f3195819f12b93113c64affb4b9cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112903

Malicious code in heka-nebula-rollup-plugin-inquirer npm...

EUVD-2025-114257

Malicious code in eclipse-gulp-terser-inquirer npm...

EUVD-2025-112475

Malicious code in inquirer-aquarius-lacerta-colors npm...

EUVD-2025-112453

Malicious code in inquirer-sails-bulma-commitlint-config-angular npm...

Malicious code in quito-phoenix-process-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1b557507e22a34ed6c77ffa39819f688ae4f6a674cf5520022347c6e212560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-child-process-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b28413cef90aca4f8fabcb9fcb9cc4c3737e32a1247520c569f1d849bef559a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-41269 Malicious code in @listr1/prompt-adapter-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62c9103dcee0afbfa63c69bae22ac8f4e415daef3fcb2610b84d8278b1732f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...