PT-2018-6101

Name of the Vulnerable Software and Affected Versions: noderequest versions all Description: The issue concerns a malicious module named noderequest that was published with the intent to hijack environment variables, sending them to attacker-controlled locations. All versions of this module have...

PT-2018-6085

Name of the Vulnerable Software and Affected Versions: nodemssql versions all Description: The nodemssql package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of this package have been unpublished from the npm registry. ...

CVE-2017-16079: Embedded Malicious Code

smb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16064: Embedded Malicious Code

node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16076: Embedded Malicious Code

proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6084

Name of the Vulnerable Software and Affected Versions: mssql.js affected versions not specified Description: The issue concerns a malicious module named mssql.js that was published with the intent to hijack environment variables, specifically designed to steal and send them to attacker-controlled...

CVE-2017-16069: Embedded Malicious Code

nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Malicious Typo-Squatting

D3.js was a malicious module as it is developed to hijack environment variables and send it to attacker’s controlled location...

Malicious Module

nodefabric was a malicious module as it is developed to hijack environment variables...

Malicious Module

node-sqlite was a malicious module as it is developed to hijack environment variables and send it to attacker's controlled location...

Malicious Typo-Squatting

fabric-js is a malicious typo-squatter package. The packages uses a similar name to a legitimate library so that developers may mistake it for the real one but executes malicious actions under the hood such as stealing environment variables upon installation...

Malicious Typo-Squatting

sqlite.js is a malicious typo-squatters. The package uses a similar name to another library so that developers may mistake it for a legitimate package but executes malicious actions under the hood such as stealing environment variables on installation...

Malicious Typo-Squatting

mariadb is a malicious typo-squatted package. The package uses a similar name to another library so that developers may mistake it for a legitimate package but executes malicious actions under the hood such as stealing environment variables on installation...

Malicious Typo-Squatting

sqlserver is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables...

Malicious Typo-Squatting

node-fabric is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables...

Malicious Typo-Squatting

nodesqlite is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables...

Malicious Typo-Squatting

jquery.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables...

CVE-2017-16046

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16048

node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16051

sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...