CVE-2017-16047

mysqljs was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16047

CVE-2017-16047 corresponds to the mysqljs npm package, which is described across multiple sources as malware that steals environment variables and exfiltrates them to attacker-controlled locations. The core issue is that the package behaved as a malicious module, and all versions have been unpubl...