Lucene search
HackeroneCVELIST:CVE-2017-16080HistoryJun 07, 2018 - 2:00 a.m.
CVE-2017-16080
2018-06-0702:00:00
CWE-506
hackerone
www.cve.org
4
EPSS
0.002
Percentile
53.8%
nodesass was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CNA Affected
[
{
"product": "nodesass node module",
"vendor": "HackerOne",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
]References
Related
prion
prion
Code injection
2018-06-07 02:29:00
nodejs
nodejs
Hijacked Environment Variables
2017-08-08 23:59:49
cve
cve
CVE-2017-16080
2018-06-07 02:29:01
github
github
Nodesass is malware
2020-09-01 18:59:50
veracode
veracode
Malicious Typo-Squatting
2018-06-07 07:08:55
nvd
nvd
CVE-2017-16080
2018-06-07 02:29:01
osv
osv
Nodesass is malware
2020-09-01 18:59:50
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00