PT-2018-6101

Name of the Vulnerable Software and Affected Versions: noderequest versions all Description: The issue concerns a malicious module named noderequest that was published with the intent to hijack environment variables, sending them to attacker-controlled locations. All versions of this module have...

CVE-2017-16077: Embedded Malicious Code

mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6093

Name of the Vulnerable Software and Affected Versions: openssl.js affected versions not specified Description: The issue concerns a malicious module named openssl.js that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlle...

PT-2018-6099

Name of the Vulnerable Software and Affected Versions: nodemailer-js versions all Description: The issue concerns a malicious module named nodemailer-js that was published with the intent to hijack environment variables, specifically designed to steal and send them to attacker-controlled location...

PT-2018-6094

Name of the Vulnerable Software and Affected Versions: opencv.js affected versions not specified Description: The issue concerns a malicious module named opencv.js that was published with the intent to hijack environment variables. This module has been unpublished by npm. Recommendations: At the...

PT-2018-6086

Name of the Vulnerable Software and Affected Versions: gruntcli affected versions not specified Description: The gruntcli package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of this package have been unpublished from t...

CVE-2017-16068: Embedded Malicious Code

ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6105

Name of the Vulnerable Software and Affected Versions: mongose affected versions not specified Description: The issue concerns a malicious module named mongose that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlled...

PT-2018-6092

Name of the Vulnerable Software and Affected Versions: node-openssl versions all Description: The node-openssl package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of the package have been unpublished from the npm...

PT-2018-6097

Name of the Vulnerable Software and Affected Versions: nodeffmpeg versions all Description: The issue concerns a malicious module named nodeffmpeg, which was designed to steal environment variables and send them to attacker-controlled locations. All versions of this module have been unpublished...

PT-2018-6098

Name of the Vulnerable Software and Affected Versions: nodecaffe versions all Description: The nodecaffe package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of this package have been unpublished from the npm registry. ...

PT-2018-6088

Name of the Vulnerable Software and Affected Versions: babelcli affected versions not specified Description: The issue concerns a malicious module named babelcli that was published with the intent to hijack environment variables, specifically designed to steal them and send the information to...

CVE-2017-16060: Embedded Malicious Code

babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6095

Name of the Vulnerable Software and Affected Versions: node-opencv versions all Description: The issue concerns a malicious module named node-opencv, which was designed to hijack environment variables and send them to attacker-controlled locations. All versions of this module have been unpublishe...

PT-2018-6084

Name of the Vulnerable Software and Affected Versions: mssql.js affected versions not specified Description: The issue concerns a malicious module named mssql.js that was published with the intent to hijack environment variables, specifically designed to steal and send them to attacker-controlled...

PT-2018-6103

Name of the Vulnerable Software and Affected Versions: http-proxy.js versions all Description: The http-proxy.js package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of this package have been unpublished from the npm...

PT-2018-6110

Name of the Vulnerable Software and Affected Versions: cross-env.js affected versions not specified Description: The cross-env.js package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of the package have been unpublished...

PT-2018-6096

Name of the Vulnerable Software and Affected Versions: ffmepg versions all Description: The ffmepg package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of this package have been unpublished from the npm registry. If thi...

PT-2018-6109

Name of the Vulnerable Software and Affected Versions: nodesass affected versions not specified Description: The issue concerns a malicious module named nodesass that was published with the intent to hijack environment variables, sending them to attacker-controlled locations. All versions of this...

PT-2018-6104

Name of the Vulnerable Software and Affected Versions: proxy.js affected versions not specified Description: The issue concerns a malicious module named proxy.js that was published with the intent to hijack environment variables, effectively stealing them and sending the data to attacker-controll...