CVE-2017-16044

CVE-2017-16044 corresponds to the npm package d3.js , reported as a malware module that hijacks environment variables and exfiltrates them to attacker-controlled endpoints. The community advisories (GHSA, npm advisory) state that all versions have been unpublished from the npm registry. The root ...

CVE-2017-16048

"node-sqlite" was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16053

The CVE-2017-16053 issue involves the npm package fabric-js , published as malware intended to hijack environment variables. Several connected sources (GHSA advisory, npm advisory, and CVE records) confirm that all versions were unpublished from the npm registry and that the malware steals enviro...

CVE-2017-16044

"d3.js" was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16050

The CVE-2017-16050 entry concerns the sqlite.js npm package, a malware payload published to hijack environment variables. Multiple connected records confirm that sqlite.js steals environment variables and exfiltrates them to attacker-controlled locations, and that all versions were unpublished fr...

CVE-2017-16048

node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16049

"nodesqlite" was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16054

CVE-2017-16054 corresponds to the npm package nodefabric, which is described in connected advisories as malware that hijacks environment variables. The nodefabric package was published to steal environment variables and exfiltrate them to attacker-controlled locations; all versions have been unpu...

CVE-2017-16048

The CVE-2017-16048 entry covers the node-sqlite package, identified as malware that hijacks environment variables. Connected advisories confirm that the malware steals environment variables and exfiltrates to attacker-controlled locations; all versions were unpublished from npm. Practical impact ...

PT-2018-6083

Name of the Vulnerable Software and Affected Versions: sqlserver affected versions not specified Description: The issue concerns a malicious module named sqlserver that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlled...

CVE-2017-16054: Embedded Malicious Code

nodefabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6077

Name of the Vulnerable Software and Affected Versions: nodesqlite versions all Description: The issue concerns a malicious module named nodesqlite that was designed to steal environment variables and send them to attacker-controlled locations. All versions of this module have been unpublished fro...

CVE-2017-16050: Embedded Malicious Code

sqlite.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16044: Embedded Malicious Code

d3.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16046: Embedded Malicious Code

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16049: Embedded Malicious Code

nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16053: Embedded Malicious Code

fabric-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

airbrake module information disclosure vulnerability

The airbrake module is an exception report notification program for use in Node.js. A security vulnerability exists in airbrake module version 0.3.8 and earlier, which stems from the program defaulting to sending environment variables with sensitive values over the HTTP protocol. An attacker can...

CVE-2017-16048: Embedded Malicious Code

node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6076

Name of the Vulnerable Software and Affected Versions: node-sqlite versions all Description: The issue concerns a malicious module named node-sqlite that was published with the intent to hijack environment variables, effectively stealing them and sending the information to attacker-controlled...