Sitting comfortably? Then it’s probably time to patch, as critical flaw uncovered in npm’s netmask package • The Register

https://www.theregister.com/2021/03/29/netmask_cve/