Vulnerabilities in Package Manager Configurations