npm›mock2easy›CVE-2020-76979.8 CRITICALInjection VulnerabilityA malicious user could inject commands through the _data variable