A serious security flaw in a commonly used npm security module, private-ip, may affect hundreds of thousands of private and public applications.