Vulnerabilities in install-package 0.4.0