The most current version found via npm refers to a probematic version of the qs package. For a report, check npm audit (myself running node10 w/ npm 6.x) or this webpage
qs
npm audit