npm›git-dummy-commit›CVE-2018-37859.8 CRITICALOS Command InjectionA command injection in git-dummy-commit allows os level commands to be executed due to an unescaped parameter.