CVE-2017-16072: Embedded Malicious Code

nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16065: Embedded Malicious Code

openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16077: Embedded Malicious Code

mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16075: Embedded Malicious Code

http-proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6103

Name of the Vulnerable Software and Affected Versions: http-proxy.js versions all Description: The http-proxy.js package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of this package have been unpublished from the npm...

PT-2018-6107

Name of the Vulnerable Software and Affected Versions: smb affected versions not specified Description: The issue concerns a malicious module named smb that was published with the intent to hijack environment variables, effectively stealing them and sending the data to locations controlled by...

CVE-2017-16069: Embedded Malicious Code

nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16071: Embedded Malicious Code

nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6099

Name of the Vulnerable Software and Affected Versions: nodemailer-js versions all Description: The issue concerns a malicious module named nodemailer-js that was published with the intent to hijack environment variables, specifically designed to steal and send them to attacker-controlled location...

PT-2018-6106

Name of the Vulnerable Software and Affected Versions: shadowsock affected versions not specified Description: The issue concerns a malicious module named shadowsock that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlle...

PT-2018-6091

Name of the Vulnerable Software and Affected Versions: node-opensl versions all Description: The node-opensl package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of this package have been unpublished from the npm...

CVE-2017-16078: Embedded Malicious Code

shadowsock was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16070: Embedded Malicious Code

nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6088

Name of the Vulnerable Software and Affected Versions: babelcli affected versions not specified Description: The issue concerns a malicious module named babelcli that was published with the intent to hijack environment variables, specifically designed to steal them and send the information to...

CVE-2017-16064: Embedded Malicious Code

node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6092

Name of the Vulnerable Software and Affected Versions: node-openssl versions all Description: The node-openssl package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of the package have been unpublished from the npm...

PT-2018-6093

Name of the Vulnerable Software and Affected Versions: openssl.js affected versions not specified Description: The issue concerns a malicious module named openssl.js that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlle...

CVE-2017-16059: Embedded Malicious Code

mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16079: Embedded Malicious Code

smb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16056: Embedded Malicious Code

mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...