OS Command Injection in GitHub repository ljharb/npm-lockfile in v2.0.3 and v2.0.4.
npm-lockfile project npm-lockfile 2.0.3
npm-lockfile project npm-lockfile 2.0.4