NPM: Electron: Local race condition in Squirrel.Mac update installation on macOS

NPM: Electron: Local race condition in Squirrel.Mac update installation on macOS vulnerability discovered by ? in WordPress Npm electron versions 39.8.10...

Electron: Local race condition in Squirrel.Mac update installation on macOS

Impact On macOS, Electron bundles the Squirrel.Mac auto-update framework, whose privileged ShipIt helper performs the final step of an update as root. A local attacker could cause that helper to overwrite a different application's files, as root, instead of the app that started the update...