CVE-2017-16079

CVE-2017-16079 corresponds to the npm malware package described as the public smb package; it hijacked environment variables and exfiltrated them to attacker-controlled locations. All versions were unpublished from the npm registry. Connected records (GhSA/NVD/Veracode/OpenVAS) confirm the malwar...

CVE-2017-16077

mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Malicious Module

nodefabric was a malicious module as it is developed to hijack environment variables...

Malicious Module

node-sqlite was a malicious module as it is developed to hijack environment variables and send it to attacker's controlled location...

CVE-2017-16054

nodefabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16045

jquery.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16050

sqlite.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16046

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16044

d3.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

node-fabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodefabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16055

CVE-2017-16055 corresponds to the npm package sqlserver, a malware module published to hijack environment variables. Connected sources confirm the malicious behavior (steals env vars and exfiltrates to attacker-controlled locations) and note that all versions have been unpublished from npm. The N...

CVE-2017-16053

The CVE-2017-16053 issue involves the npm package fabric-js , published as malware intended to hijack environment variables. Several connected sources (GHSA advisory, npm advisory, and CVE records) confirm that all versions were unpublished from the npm registry and that the malware steals enviro...

CVE-2017-16051

sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16051

CVE-2017-16051 corresponds to the npm malware incident around the sqliter package. The sqliter module was published with the intent to hijack environment variables and exfiltrate data, and all versions were subsequently unpublished from npm. Multiple connected sources confirm the package’s malici...