VYPR

npm package

legitimate-chocolate-hummingbird

pkg:npm/legitimate-chocolate-hummingbird

Malware

2 malicious versions on record

One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.

  • GHSA-jf96-4xqj-g4fwMalicious code in legitimate-chocolate-hummingbird (npm)
    Sep 17, 2026
  • MAL-2025-69107Malicious code in legitimate-chocolate-hummingbird (npm)
    Nov 11, 2025

Vulnerabilities (0)

No CVEs are currently linked to this package.