A parsing mismatch in the ip-address npm package can make your agent fetch an internal cloud-metadata server it meant to block. He…