CRITICAL9.8npmGHSA-5875-m6jq-vf78· CVE-2022-25865, SNYK-JS-WORKSPACETOOLS-2421201Command injection in workspace-toolsModified: 7/8/2026