noderequest is malware

🗓️ 17 Sep 2018 20:39:17Reported by GitHub Advisory DatabaseType

The `noderequest` package is malware that steals environment variables and sends them to attacker controlled locations, all versions have been unpublished from the npm registry. Recommendation: Delete the package, clear npm cache, and regenerate sensitive credentials

Reporter	Title	Published	Views	Family All 10
CNVD	Unspecified vulnerability in noderequest	13 Jun 201800:00	–	cnvd
CVE	CVE-2017-16073	7 Jun 201802:00	–	cve
Cvelist	CVE-2017-16073	7 Jun 201802:00	–	cvelist
EUVD	EUVD-2018-0438	7 Oct 202500:30	–	euvd
Node.js	Hijacked Environment Variables	8 Aug 201723:41	–	nodejs
NVD	CVE-2017-16073	7 Jun 201802:29	–	nvd
OpenVAS	Malicious JavaScript Package Detection	12 Jun 201800:00	–	openvas
OSV	GHSA-5CV7-R488-WC5X noderequest is malware	17 Sep 201820:39	–	osv
Prion	Design/Logic Flaw	7 Jun 201802:29	–	prion
Veracode	Malicious Typo-Squatting	7 Jun 201806:35	–	veracode