Advisories for Npm/Json package

This affects the package json. It is possible to inject arbritary commands using the parseLookup function.