npm audit
run on my project and got me this
High Command Injection
Dependency of @angular-devkit/build-angular [dev]
Remove the tree-kill package from the node_modules folder & Delete
the package-lock.json file.
Find @angular-devkit/build-angular
folder in the node_modules folder and edit the package.json file;
change tree-kill version from 1.2.1 to 1.2.2
Find @ngtools/webpack
in the node_modules folder and edit the package.json file;
change tree-kill version from 1.2.1 to 1.2.2