Advisories for Npm/Tianma-Static package

A stored xss in tianma-static module versions allows an attacker to execute arbitrary javascript.