Vulnerabilities in NPM