PT-2018-6083

Name of the Vulnerable Software and Affected Versions: sqlserver affected versions not specified Description: The issue concerns a malicious module named sqlserver that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlled...

CVE-2017-16055: Embedded Malicious Code

sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16046: Embedded Malicious Code

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6072

Name of the Vulnerable Software and Affected Versions: d3.js versions affected versions not specified Description: The issue concerns a malicious module named d3.js that was published with the intent to hijack environment variables, effectively stealing them and sending the information to...

CVE-2017-16053: Embedded Malicious Code

fabric-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6082

Name of the Vulnerable Software and Affected Versions: nodefabric versions all Description: The issue concerns a malicious module named nodefabric that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlled locations. All...

CVE-2017-16051: Embedded Malicious Code

sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16052: Embedded Malicious Code

node-fabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6073

Name of the Vulnerable Software and Affected Versions: jquery.js affected versions not specified Description: The issue concerns a malicious module named jquery.js that was published with the intent to hijack environment variables, stealing them and sending the information to attacker-controlled...

PT-2018-6077

Name of the Vulnerable Software and Affected Versions: nodesqlite versions all Description: The issue concerns a malicious module named nodesqlite that was designed to steal environment variables and send them to attacker-controlled locations. All versions of this module have been unpublished fro...

CVE-2017-16048: Embedded Malicious Code

node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2016-10530

The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending...

CVE-2016-10530

The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending...

Hardcoded credentials

The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending...

CVE-2016-10530

The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending...

CVE-2016-10530

The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending...

node-tkinter information disclosure vulnerability

node-tkinter is a malware that steals environment variables and sends them to attackers. A security vulnerability exists in node-tkinter. An attacker can use this vulnerability to steal environment variables and send them to an address under the attacker's control...

CVE-2016-10530: Exposure of Sensitive Information to an Unauthorized Actor

The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending...

PT-2018-4710

Name of the Vulnerable Software and Affected Versions airbrake versions 0.3.8 and earlier Description The issue concerns the airbrake module sending environment variables over HTTP by default. This can lead to the exposure of secret keys and sensitive values to malicious users on the same network...

tkinter Information Disclosure Vulnerability

tkinter is a malware that steals environment variables and sends them to attackers. A security vulnerability exists in tkinter. An attacker can exploit the vulnerability to steal environment variables and send them to an address under the attacker's control...