Advisories for Npm/P4 package

The package p4 before 0.0.7 is vulnerable to Command Injection via the run() function due to improper input sanitization