Advisories for Npm/Vagrant.js package

All versions of the package vagrant.js is vulnerable to Command Injection via the boxAdd function due to improper input sanitization.