CRITICAL9.8npmGHSA-m647-5wf9-3jp3· CVE-2020-7603OS Command Injection in closure-compiler-streamModified: 3/13/2026