nodemailer-js is malware

🗓️ 29 Aug 2018 23:40:01Reported by GitHub Advisory DatabaseType

nodemailer-js is malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendations for handling the presence of this package in your environment include deleting it, clearing npm cache, and regenerating sensitive credentials

Reporter	Title	Published	Views	Family All 10
CNVD	Unspecified vulnerability in nodemailer.js	13 Jun 201800:00	–	cnvd
CVE	CVE-2017-16071	7 Jun 201802:00	–	cve
Cvelist	CVE-2017-16071	7 Jun 201802:00	–	cvelist
EUVD	EUVD-2018-0430	7 Oct 202500:30	–	euvd
Node.js	Hijacked Environment Variables	8 Aug 201723:35	–	nodejs
NVD	CVE-2017-16071	7 Jun 201802:29	–	nvd
OpenVAS	Malicious JavaScript Package Detection	12 Jun 201800:00	–	openvas
OSV	GHSA-XH56-3F5W-9H25 nodemailer-js is malware	29 Aug 201823:40	–	osv
Prion	Code injection	7 Jun 201802:29	–	prion
Veracode	Malicious Typo-Squatting	7 Jun 201806:29	–	veracode