CVE-2017-16063

node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16063

The CVE-2017-16063 issue corresponds to the node-opensl malware. The affected component is the node-opensl package, which was published to hijack environment variables and exfiltrate them to attacker-controlled locations. All versions have been unpublished from the npm registry. The primary root ...