Vulnerabilities in node_modules software