vibes-plug vulnerabilities (npm)

Reported as malicious.