CRITICAL9.8npmGHSA-426h-24vj-qwxf· CVE-2020-7614Command Injection in npm-programmaticModified: 3/13/2026