HIGH8.8npmGHSA-xrmc-c5cg-rv7xSafeInstall agent guard shell parsing can miss raw package executionModified: 7/10/2026