React App Create Npm Package Vulnerability