Description
This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion() function.
Remediation
References
https://security.netapp.com/advisory/ntap-20220901-0012/
https://security.snyk.io/vuln/SNYK-JS-NPMHELP-1050983
Related Vulnerabilities
CVE-2017-5648 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2019-16772 Vulnerability in npm package serialize-javascript
CVE-2020-2193 Vulnerability in maven package io.jenkins.plugins:echarts-api
CVE-2018-5673 Vulnerability in maven package org.apache.geronimo.plugins:dojo
CVE-2022-29002 Vulnerability in maven package com.xuxueli:xxl-job