Hi, first get rid of that 7y old problematic node and install mssql-plus (see: Mssql not sending data to database using mustache format - #4 by Steve-Mcl)
Then, stop using dynamic queries (to avoid SQL injection hacks) and use parameters. Here is an example of how with mssql-plus: Mssql not sending data to database using mustache format - #2 by Steve-Mcl