mysqljs is malware

🗓️ 01 Sep 2020 18:58:47Reported by GitHub Advisory DatabaseType

The 'mysqljs' package is malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. The real security concern is determining how it got there

Reporter	Title	Published	Views	Family All 11
CNVD	mysqljs Information Disclosure Vulnerability	31 May 201800:00	–	cnvd
CVE	CVE-2017-16047	29 May 201820:00	–	cve
Cvelist	CVE-2017-16047	29 May 201820:00	–	cvelist
EUVD	EUVD-2020-0891	7 Oct 202500:30	–	euvd
Node.js	Hijacked Environment Variables	8 Aug 201721:42	–	nodejs
NVD	CVE-2017-16047	29 May 201820:29	–	nvd
OpenVAS	Malicious JavaScript Package Detection	12 Jun 201800:00	–	openvas
OSV	GHSA-8GV6-G7VP-HR34 mysqljs is malware	1 Sep 202018:58	–	osv
Prion	Code injection	29 May 201820:29	–	prion
Veracode	Malicious Typo-Squatting	30 May 201805:37	–	veracode