Advisories for Npm/Windows-Cpu package

windows-cpu is vulnerable to command injection resulting in code execution as Node.js user

The findLoad method passes a provided string directly to the shell, allowing arbitrary command execution.