The vulnerability of the NPM’s npm-dependency-versions versioning tool allows a attacker to execute any command they desire.

The vulnerability of the NPM dependency-versions versioning tool is related to insufficient checking of arguments passed to the command. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...