6103 matches found
CVE-2017-16051
CVE-2017-16051 corresponds to the npm malware incident around the sqliter package. The sqliter module was published with the intent to hijack environment variables and exfiltrate data, and all versions were subsequently unpublished from npm. Multiple connected sources confirm the package’s malici...
CVE-2017-16054
CVE-2017-16054 corresponds to the npm package nodefabric, which is described in connected advisories as malware that hijacks environment variables. The nodefabric package was published to steal environment variables and exfiltrate them to attacker-controlled locations; all versions have been unpu...
CVE-2017-16048
The CVE-2017-16048 entry covers the node-sqlite package, identified as malware that hijacks environment variables. Connected advisories confirm that the malware steals environment variables and exfiltrates to attacker-controlled locations; all versions were unpublished from npm. Practical impact ...
CVE-2017-16050
"sqlite.js" was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16050
The CVE-2017-16050 entry concerns the sqlite.js npm package, a malware payload published to hijack environment variables. Multiple connected records confirm that sqlite.js steals environment variables and exfiltrates them to attacker-controlled locations, and that all versions were unpublished fr...
CVE-2017-16045
jquery.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16055
"sqlserver" was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16050
sqlite.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16050: Embedded Malicious Code
sqlite.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
PT-2018-6080
Name of the Vulnerable Software and Affected Versions: node-fabric versions all Description: The issue concerns a malicious module named node-fabric that was published with the intent to hijack environment variables, effectively stealing them and sending the data to attacker-controlled locations...
CVE-2017-16044: Embedded Malicious Code
d3.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
PT-2018-6076
Name of the Vulnerable Software and Affected Versions: node-sqlite versions all Description: The issue concerns a malicious module named node-sqlite that was published with the intent to hijack environment variables, effectively stealing them and sending the information to attacker-controlled...
PT-2018-6074
Name of the Vulnerable Software and Affected Versions: mariadb versions all Description: The mariadb package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of the package have been unpublished from the npm registry. If th...
PT-2018-6079
Name of the Vulnerable Software and Affected Versions: sqliter versions all Description: The issue concerns a malicious module named sqliter that was designed to steal environment variables and send them to attacker-controlled locations. All versions of this module have been unpublished from the...
CVE-2017-16045: Embedded Malicious Code
jquery.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
PT-2018-6081
Name of the Vulnerable Software and Affected Versions: fabric-js versions all Description: The issue concerns a malicious module named fabric-js that was published with the intent to hijack environment variables, effectively stealing them and sending the data to locations controlled by attackers...
airbrake module information disclosure vulnerability
The airbrake module is an exception report notification program for use in Node.js. A security vulnerability exists in airbrake module version 0.3.8 and earlier, which stems from the program defaulting to sending environment variables with sensitive values over the HTTP protocol. An attacker can...
CVE-2017-16054: Embedded Malicious Code
nodefabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
PT-2018-6078
Name of the Vulnerable Software and Affected Versions: sqlite.js affected versions not specified Description: The issue concerns a malicious module named sqlite.js that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlled...