jquery.js is malware

🗓️ 23 Jul 2018 20:54:24Reported by GitHub Advisory DatabaseType

`jquery.js` is malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Remediation steps include package deletion, npm cache clearance, and reviewing sensitive credentials in environment variables

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2017-16045	4 Jun 201819:00	–	cve
Cvelist	CVE-2017-16045	4 Jun 201819:00	–	cvelist
EUVD	EUVD-2018-0288	7 Oct 202500:30	–	euvd
Node.js	Hijacked Environment Variables	8 Aug 201721:44	–	nodejs
NVD	CVE-2017-16045	4 Jun 201819:29	–	nvd
OpenVAS	Malicious JavaScript Package Detection	12 Jun 201800:00	–	openvas
OSV	GHSA-JP27-CWP2-5QQR jquery.js is malware	23 Jul 201820:54	–	osv
Prion	Code injection	4 Jun 201819:29	–	prion
Veracode	Malicious Typo-Squatting	5 Jun 201802:51	–	veracode
vulnersOsv	mapdemotest1 (=0.0.1), websocketsli (=1.0.0) potentially affected by CVE-2017-16045 via jquery.js (=0.0.2-security)	23 Jul 201820:54	–	vulnersosv