Code injection

nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16071

nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16060

babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16067

node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Design/Logic Flaw

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16073

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16064

node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16067

node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16067

CVE-2017-16067 corresponds to the npm malware incident involving the node-opencv package. The package is a malicious module that hijacks and exfiltrates environment variables; all versions have been unpublished from the npm registry. Connected advisories confirm malware characteristics and sugges...

CVE-2017-16075

CVE-2017-16075 corresponds to the http-proxy.js package that was published as malware with the intent to hijack environment variables and exfiltrate them to attacker-controlled locations. The npm advisory and related records note that all versions were unpublished from the npm registry. Connected...

CVE-2017-16070

nodecaffe is a malware package published to hijack environment variables and exfiltrate them to attacker-controlled locations. The npm-hosted module has been unpublished across all versions. Affected context from the provided documents shows malware behavior and cleanup guidance: remove the packa...

CVE-2017-16070

nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...