CVE-2017-16073: Embedded Malicious Code

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6096

Name of the Vulnerable Software and Affected Versions: ffmepg versions all Description: The ffmepg package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of this package have been unpublished from the npm registry. If thi...

PT-2018-6104

Name of the Vulnerable Software and Affected Versions: proxy.js affected versions not specified Description: The issue concerns a malicious module named proxy.js that was published with the intent to hijack environment variables, effectively stealing them and sending the data to attacker-controll...

PT-2018-6109

Name of the Vulnerable Software and Affected Versions: nodesass affected versions not specified Description: The issue concerns a malicious module named nodesass that was published with the intent to hijack environment variables, sending them to attacker-controlled locations. All versions of this...

CVE-2017-16060: Embedded Malicious Code

babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6086

Name of the Vulnerable Software and Affected Versions: gruntcli affected versions not specified Description: The gruntcli package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of this package have been unpublished from t...

CVE-2017-16076: Embedded Malicious Code

proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16081: Embedded Malicious Code

cross-env.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6098

Name of the Vulnerable Software and Affected Versions: nodecaffe versions all Description: The nodecaffe package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of this package have been unpublished from the npm registry. ...

PT-2018-6100

Name of the Vulnerable Software and Affected Versions: nodemailer.js affected versions not specified Description: The nodemailer.js package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions have been unpublished from the npm...

CVE-2017-16058: Embedded Malicious Code

gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16074: Embedded Malicious Code

crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16067: Embedded Malicious Code

node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16057: Embedded Malicious Code

nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6095

Name of the Vulnerable Software and Affected Versions: node-opencv versions all Description: The issue concerns a malicious module named node-opencv, which was designed to hijack environment variables and send them to attacker-controlled locations. All versions of this module have been unpublishe...

PT-2018-6105

Name of the Vulnerable Software and Affected Versions: mongose affected versions not specified Description: The issue concerns a malicious module named mongose that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlled...

PT-2018-6097

Name of the Vulnerable Software and Affected Versions: nodeffmpeg versions all Description: The issue concerns a malicious module named nodeffmpeg, which was designed to steal environment variables and send them to attacker-controlled locations. All versions of this module have been unpublished...

PT-2018-6102

Name of the Vulnerable Software and Affected Versions: crossenv versions all Description: The crossenv package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of the package have been unpublished from the npm registry. If...

CVE-2017-16063: Embedded Malicious Code

node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16066: Embedded Malicious Code

opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...