VYPR

npm package

inquirer-winston-commitlint-cosmiconfig

pkg:npm/inquirer-winston-commitlint-cosmiconfig

Malware

2 malicious versions on record

One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.

  • GHSA-qv6f-73g2-3q8fMalicious code in inquirer-winston-commitlint-cosmiconfig (npm)
    Sep 13, 2026
  • MAL-2025-187493Malicious code in inquirer-winston-commitlint-cosmiconfig (npm)
    Nov 13, 2025

Vulnerabilities (0)

No CVEs are currently linked to this package.