Package `shelljs` had Improper Privilege Management bug in versions previous to v0.8.5: https://github.com/advisories/GHSA-4rq4-32rv-6wp6