npm CLI 数据伪造问题漏洞

npm CLI is a package manager from the US-based npm. engine is an OpenSSL reference implementation of the GOST encryption algorithm. The npm CLI suffers from a data forgery issue vulnerability that stems from the npm ci command in the software. Even if the dependency information in package-lock.js...