npm webpack dev server vulnerability