CriticalCVSS 9.8
EPSS 4.2%
npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user