CRITICAL9.8npmGHSA-3x62-x456-q2vm· CVE-2022-24437, SNYK-JS-GITPULLORCLONE-2434307OS Command Injection in git-pull-or-cloneModified: 7/8/2026