Vulnerabilities in npm-user-validate