Advisories for Npm/Bassmaster package

A vulnerability allows for an attacker to provide arbitrary JavaScript that is then executed server side via eval.