Uninitialized Memory

npmconf is vulnerable to uninitialized memory. The library contains an uninitialized memory allocation when passing a large number as the password property of config.setCredentialsByURI, which can allow a malicious user to gain access to sensitive information or crash the application...