6099 matches found
CVE-2017-16079
smb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16059
CVE-2017-16059 relates to the npm package mssql-node , identified as malware that steals environment variables and exfiltrates them to attacker-controlled locations. The linked advisories corroborate that all versions were unpublished from npm. The vulnerability’s concrete details in connected do...
CVE-2017-16060
babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16056
mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16075
CVE-2017-16075 corresponds to the http-proxy.js package that was published as malware with the intent to hijack environment variables and exfiltrate them to attacker-controlled locations. The npm advisory and related records note that all versions were unpublished from the npm registry. Connected...
CVE-2017-16078
CVE-2017-16078 concerns the npm package shadow sock—described in connected advisories as a malware that steals environment variables and exfiltrates to attacker-controlled endpoints. The npm advisory and GitHub/OSV entries confirm it has been unpublished from the npm registry; all versions are re...
CVE-2017-16071
CVE-2017-16071 concerns the npm package nodemailer-js , described as malware that hijacks environment variables and exfiltrates them to attacker-controlled locations. All versions were unpublished from the npm registry. Connected advisories corroborate malware behavior and provide remediation gui...
CVE-2017-16070
nodecaffe is a malware package published to hijack environment variables and exfiltrate them to attacker-controlled locations. The npm-hosted module has been unpublished across all versions. Affected context from the provided documents shows malware behavior and cleanup guidance: remove the packa...
CVE-2017-16069
The CVE-2017-16069 case concerns the nodeffmpeg package, identified as malware that hijacks and exfiltrates environment variables. Several sources (npm advisory, GitHub advisory, OSV) confirm that nodeffmpeg was published as malicious, with all versions unpublished from the npm registry, and that...
CVE-2017-16076
CVE-2017-16076 refers to the npm package proxy.js, described as malware that hijacks environment variables. The connected advisories confirm that proxy.js was published to steal env vars and that all versions were unpublished from the npm registry. Exploitation details are not provided in the doc...
CVE-2017-16058
CVE-2017-16058 corresponds to the npm package gruntcli, which was a malicious module designed to hijack environment variables. Multiple connected sources confirm that gruntcli behaved as malware, stealing environment variables and transmitting them to attacker-controlled locations; all versions h...
CVE-2017-16065
CVE-2017-16065 corresponds to the npm malware incident involving the package named openssl.js, which was published to hijack environment variables and exfiltrate them to attacker-controlled locations. The linked records confirm that the package has been unpublished from the npm registry and that ...
CVE-2017-16063
The CVE-2017-16063 issue corresponds to the node-opensl malware. The affected component is the node-opensl package, which was published to hijack environment variables and exfiltrate them to attacker-controlled locations. All versions have been unpublished from the npm registry. The primary root ...
CVE-2017-16057
The CVE-2017-16057 entry concerns the nodemssql npm package, which is documented as malware that steals environment variables and exfiltrates them to attacker-controlled locations. All versions have been unpublished from the npm registry. Impact described in linked advisories includes credential ...
CVE-2017-16079
CVE-2017-16079 corresponds to the npm malware package described as the public smb package; it hijacked environment variables and exfiltrated them to attacker-controlled locations. All versions were unpublished from the npm registry. Connected records (GhSA/NVD/Veracode/OpenVAS) confirm the malwar...
CVE-2017-16068
ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16057
nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16064
node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
