Name of the Vulnerable Software and Affected Versions npmconf versions prior to 2.1.3

Description The issue arises when a typed number is passed as input on Node.js 4.x, causing npmconf to allocate and write to disk uninitialized memory contents.

Recommendations Update to version 2.1.3 or later. Consider switching to another config storage mechanism, as npmconf is deprecated and should not be used.