Advisories for Npm/@Vltpkg/Tar package

vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction.