3 matches found
CVE-2017-16076
proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
7.5CVSS7.5AI score0.01123EPSS
SaveExploits0References1
CVE-2017-16076
CVE-2017-16076 refers to the npm package proxy.js, described as malware that hijacks environment variables. The connected advisories confirm that proxy.js was published to steal env vars and that all versions were unpublished from the npm registry. Exploitation details are not provided in the doc...
7.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
20