Arbitrary Command Execution
Affecting windows-cpu package, ALL versions
windows-cpu is a CPU monitoring utility for windows.
Affected versions of this package are vulnerable to Arbitrary Command Execution via the
findLoad method, which passes a user-inputed string to the shell without validation.
Proof of Concept: This code will open the built-in calculator program.
var win = require('windows-cpu'); wind.findLoad('foo & calc.exe');
There is no fix version for