Improper validation of integrity check value in yarn package for dependency management