Lucene search
+L

6099 matches found

Veracode
Veracode
•added 2018/06/07 7:00 a.m.•24 views

Malicious Typo-Squatting

mongose is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.0122EPSS
SaveExploits1References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:54 a.m.•21 views

Malicious Typo-Squatting

proxy.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01106EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:41 a.m.•23 views

Malicious Typo-Squatting

http-proxy.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01158EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:38 a.m.•22 views

Malicious Typo-Squatting

crossenv is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01158EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:35 a.m.•19 views

Malicious Typo-Squatting

noderequest is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01106EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:32 a.m.•20 views

Malicious Typo-Squatting

nodemailer.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01158EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:29 a.m.•23 views

Malicious Typo-Squatting

nodemailer-js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01106EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:26 a.m.•26 views

Malicious Typo-Squatting

nodecaffe is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01158EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:23 a.m.•24 views

Malicious Typo-Squatting

nodeffmpeg is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01158EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:20 a.m.•26 views

Malicious Typo-Squatting

ffmepg is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01158EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:17 a.m.•26 views

Malicious Typo-Squatting

node-opencv is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01106EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:09 a.m.•23 views

Malicious Typo-Squatting

openssl.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01158EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:06 a.m.•24 views

Malicious Typo-Squatting

node-openssl is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01158EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:03 a.m.•24 views

Malicious Typo-Squatting

node-opensl is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01106EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 6:00 a.m.•25 views

Malicious Typo-Squatting

babelcli is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01158EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 5:56 a.m.•25 views

Malicious Typo-Squatting

mssql-node is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01106EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 5:52 a.m.•24 views

Malicious Typo-Squatting

gruntcli is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01106EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 5:47 a.m.•26 views

Malicious Typo-Squatting

mssql.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01106EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2018/06/07 5:40 a.m.•24 views

Malicious Module

nodemssql is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01106EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/06/07 2:29 a.m.•25 views

CVE-2017-16074

crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5CVSS7.5AI score0.01158EPSS
SaveExploits0References1
Rows per page
Query Builder