GitHub Researchers Discover Code Execution Bugs in 'tar' and npm CLI

In the course of two months (July and August), security experts at GitHub have discovered arbitrary code execution vulnerabilities in the open-source Node.js packages, tar, and @npmcli/arborist.