These are not JavaScript zero-day bugs, they are tooling bugs.

    researchers said the new bypass bugs were found in npm, pnpm, vlt, and Bun.