OS Command Injection in install-package
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.
Advisories for Npm/Install-Package package
2022
2020
Injection Vulnerability
install-package is vulnerable to Command Injection. It allows execution of arbitrary commands via the device function.