CVE-2017-16128

The module npm-script-demo opened a connection to a command and control server. It has been removed from the npm registry...

CVE-2017-16128

The CVE-2017-16128 entry concerns the npm-script-demo package, a malware that opens a connection to a command-and-control server after installation. Affected component is the npm-script-demo package (Node/NPM ecosystem); root cause is malware behavior enabling external control. Impact stated acro...