Malicious code in cosmicray-commitlint-rollup-spawn (npm)

The package cosmicray-commitlint-rollup-spawn was found to contain malicious code...