572 matches found
CVE-2017-16044
d3.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
Code injection
node-fabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
Code injection
fabric-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
Code injection
sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16055
sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16051
sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16049
nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16054
CVE-2017-16054 corresponds to the npm package nodefabric, which is described in connected advisories as malware that hijacks environment variables. The nodefabric package was published to steal environment variables and exfiltrate them to attacker-controlled locations; all versions have been unpu...
CVE-2017-16052
node-fabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16050
The CVE-2017-16050 entry concerns the sqlite.js npm package, a malware payload published to hijack environment variables. Multiple connected records confirm that sqlite.js steals environment variables and exfiltrates them to attacker-controlled locations, and that all versions were unpublished fr...
CVE-2017-16044
d3.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16048
node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16046
mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16054
nodefabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16050
sqlite.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16061
tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16047
mysqljs was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16047
CVE-2017-16047 corresponds to the mysqljs npm package, which is described across multiple sources as malware that steals environment variables and exfiltrates them to attacker-controlled locations. The core issue is that the package behaved as a malicious module, and all versions have been unpubl...