HIGH7.1npmGHSA-7wpj-vvmv-pgm8· CVE-2026-54545@wakaru/cli arbitrary file write during bundle unpackModified: 7/28/2026