shelljs is vulnerable to Improper Privilege Management
https://github.com/advisories/GHSA-4rq4-32rv-6wp6
https://huntr.dev/bounties/50996581-c08e-4eed-a90e-c0bac082679c
https://github.com/shelljs/shelljs/commit/d919d22dd6de385edaa9d90313075a77f74b338c