CRITICAL9.8npmGHSA-6qpr-9mc5-7gch· CVE-2020-28490, SNYK-JS-ASYNCGIT-1064877Command Injection in async-gitModified: 9/10/2026