All the vulnerabilities related to the version 0.1.0 of the package
Command Injection in command-exists
Versions of command-exists
before 1.2.4 are vulnerable to command injection. This is exploitable if user input is provided to this module.
Update to version 1.2.4 or later.