Detecting Vulnerable JavaScript Libraries in Hybrid Android Applications