CVE-2017-16078: Embedded Malicious Code

shadowsock was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6087

Name of the Vulnerable Software and Affected Versions: mssql-node versions all Description: The issue concerns a malicious module named mssql-node that was published with the intent to hijack environment variables, sending them to attacker-controlled locations. All versions of this module have be...

PT-2018-6102

Name of the Vulnerable Software and Affected Versions: crossenv versions all Description: The crossenv package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of the package have been unpublished from the npm registry. If...

PT-2018-6100

Name of the Vulnerable Software and Affected Versions: nodemailer.js affected versions not specified Description: The nodemailer.js package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions have been unpublished from the npm...

CVE-2017-16072: Embedded Malicious Code

nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6106

Name of the Vulnerable Software and Affected Versions: shadowsock affected versions not specified Description: The issue concerns a malicious module named shadowsock that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlle...

PT-2018-6107

Name of the Vulnerable Software and Affected Versions: smb affected versions not specified Description: The issue concerns a malicious module named smb that was published with the intent to hijack environment variables, effectively stealing them and sending the data to locations controlled by...

CVE-2017-16058: Embedded Malicious Code

gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16073: Embedded Malicious Code

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16057: Embedded Malicious Code

nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6091

Name of the Vulnerable Software and Affected Versions: node-opensl versions all Description: The node-opensl package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of this package have been unpublished from the npm...

CVE-2017-16075: Embedded Malicious Code

http-proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Malicious Typo-Squatting

D3.js was a malicious module as it is developed to hijack environment variables and send it to attacker’s controlled location...

Malicious Module

nodefabric was a malicious module as it is developed to hijack environment variables...

Malicious Module

node-sqlite was a malicious module as it is developed to hijack environment variables and send it to attacker's controlled location...

Malicious Typo-Squatting

fabric-js is a malicious typo-squatter package. The packages uses a similar name to a legitimate library so that developers may mistake it for the real one but executes malicious actions under the hood such as stealing environment variables upon installation...

Malicious Typo-Squatting

sqlite.js is a malicious typo-squatters. The package uses a similar name to another library so that developers may mistake it for a legitimate package but executes malicious actions under the hood such as stealing environment variables on installation...

Malicious Typo-Squatting

mariadb is a malicious typo-squatted package. The package uses a similar name to another library so that developers may mistake it for a legitimate package but executes malicious actions under the hood such as stealing environment variables on installation...

Malicious Typo-Squatting

sqlserver is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables...

Malicious Typo-Squatting

node-fabric is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables...