Command Injection

npm-help is vulnerable to command injection. The vulnerability exists in the export.latestVersion function in index.js which allows an attacker to inject and execute malicious commands...

CVE-2020-28445

This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion function...

Design/Logic Flaw

This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion function...