Description
This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion() function.
Remediation
References
https://security.netapp.com/advisory/ntap-20220901-0012/
https://security.snyk.io/vuln/SNYK-JS-NPMHELP-1050983
Related Vulnerabilities
CVE-2022-21803 Vulnerability in maven package org.webjars.npm:nconf
CVE-2019-16775 Vulnerability in npm package bin-links
CVE-2017-20151 Vulnerability in maven package com.itextpdf:itext-rups
CVE-2021-44228 Vulnerability in maven package org.apache.logging.log4j:log4j-core
CVE-2015-5377 Vulnerability in maven package org.elasticsearch:elasticsearch