Vulnerabilities in npmpubman