Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2017-16060

babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16060

CVE-2017-16060 describes the npm package babelcli, a malware package designed to hijack environment variables. The connected documents confirm that babelcli steals environment variables and exfiltrates them to attacker-controlled locations, and that all versions were unpublished from the npm regi...

CVE-2017-16060

babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...