How to remove npm packages when can't be removed by the system?

Question

If I run "npm audit" on my project I can see that there are 16 vulnerabilities found, from which 1 of high severity. Image 1

I go to the "more information" about that high severity vulnerability and I read that I can avoid it by updating the package to "3.3.1 or later". Therefore, the solution should be "npm install ws@latest". The problem is that it doesn't work and "ws" remains with the same version for some reasons.

Image2

Another idea is to run "npm uninstall ws" so I can "brute force" a reinstall. Unfortunately not even uninstalling it works. I try to run the suggested "npm audit fix" and the result is still negative:

fixed 0 of 16 vulnerabilities in 901394 scanned packages 16 vulnerabilities required manual review and could not be updated

Notice that I am the administrator therefore I should have no problem updating. I also tried updating it globally (-g). The project is in react-native but I don't believe this makes any sense as information.

How can I stop getting those vulnerabilities once forever?

No, npm audit fix --force won't work either.