GitHub Patches Security Flaws in Core Node.js Dependencies
Four of the identified security holes impact the npm CLI when a malicious or untrusted npm package is installed and could lead to code execution even when using the –ignore-scripts argument.