Advisories for Npm/Karma-Mojo package

karma-mojo is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument.