GitHub Patches Security Flaws in Core Node.js Dependencies

Four of the identified security holes impact the npm CLI when a malicious or untrusted npm package is installed and could lead to code execution even when using the --ignore-scripts argument.