CRITICAL9.8npmGHSA-6m4r-m3gc-h4r5· CVE-2020-7629, SNYK-JS-INSTALLPACKAGE-564267OS Command Injection in install-packageModified: 7/8/2026