This NPM package with millions of weekly downloads has fixed a remote code execution flaw

Developers running Node.js applications will need to check if they're using the pac-resolver JavaScript library and update it if it hasn't been updated recently.