[rwth-security] Npm patches two serious bugs