CVE-2017-16055: Embedded Malicious Code

sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16045: Embedded Malicious Code

jquery.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6078

Name of the Vulnerable Software and Affected Versions: sqlite.js affected versions not specified Description: The issue concerns a malicious module named sqlite.js that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlled...

PT-2018-6081

Name of the Vulnerable Software and Affected Versions: fabric-js versions all Description: The issue concerns a malicious module named fabric-js that was published with the intent to hijack environment variables, effectively stealing them and sending the data to locations controlled by attackers...

PT-2018-6072

Name of the Vulnerable Software and Affected Versions: d3.js versions affected versions not specified Description: The issue concerns a malicious module named d3.js that was published with the intent to hijack environment variables, effectively stealing them and sending the information to...

PT-2018-6082

Name of the Vulnerable Software and Affected Versions: nodefabric versions all Description: The issue concerns a malicious module named nodefabric that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlled locations. All...

CVE-2017-16052: Embedded Malicious Code

node-fabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6073

Name of the Vulnerable Software and Affected Versions: jquery.js affected versions not specified Description: The issue concerns a malicious module named jquery.js that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlled...

PT-2018-6079

Name of the Vulnerable Software and Affected Versions: sqliter versions all Description: The issue concerns a malicious module named sqliter that was designed to steal environment variables and send them to attacker-controlled locations. All versions of this module have been unpublished from the...

CVE-2017-16051: Embedded Malicious Code

sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6080

Name of the Vulnerable Software and Affected Versions: node-fabric versions all Description: The issue concerns a malicious module named node-fabric that was published with the intent to hijack environment variables, effectively stealing them and sending the data to attacker-controlled locations...

PT-2018-6074

Name of the Vulnerable Software and Affected Versions: mariadb versions all Description: The mariadb package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of the package have been unpublished from the npm registry. If th...

CVE-2016-10530

The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending...

Hardcoded credentials

The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending...

CVE-2016-10530

The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending...

CVE-2016-10530

The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending...

CVE-2016-10530

The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending...

PT-2018-4710

Name of the Vulnerable Software and Affected Versions airbrake versions 0.3.8 and earlier Description The issue concerns the airbrake module sending environment variables over HTTP by default. This can lead to the exposure of secret keys and sensitive values to malicious users on the same network...

CVE-2016-10530: Exposure of Sensitive Information to an Unauthorized Actor

The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending...

mysqljs Information Disclosure Vulnerability

mysqljs is a malware that steals environment variables and sends them to an attacker. A security vulnerability exists in mysqljs. The vulnerability can be exploited by an attacker to steal environment variables and send them to an address under the attacker's control...