Lucene search
HackeroneCVELIST:CVE-2017-16204HistoryApr 26, 2018 - 12:00 a.m.
CVE-2017-16204
2018-04-2600:00:00
CWE-506
hackerone
www.cve.org
0.002 Low
EPSS
Percentile
53.9%
The jquey module exfiltrates sensitive data such as a user’s private SSH key and bash history to a third party server during installation.
CNA Affected
[
{
"product": "jquey node module",
"vendor": "HackerOne",
"versions": [
{
"status": "affected",
"version": "1.0.1"
}
]
}
]References
Related
nodejs
nodejs
Exfiltrates data on installation
2017-10-04 23:30:21
prion
prion
Information disclosure
2018-06-07 02:29:00
nvd
nvd
CVE-2017-16204
2018-06-07 02:29:06
osv
osv
jquey is malware
2018-08-06 21:41:38
veracode
veracode
Malicious Typo-Squatting
2018-06-08 04:30:20
github
github
jquey is malware
2018-08-06 21:41:38
cve
cve
CVE-2017-16204
2018-06-07 02:29:06
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00