A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized parser input.

The new name “represents the innate creativity, individuality and forward-thinking energy embedded within each member of XG." ...