CVE-2017-16204

The jquey package is malware that exfiltrates sensitive data (e.g., private SSH keys and bash history) to attacker-controlled locations during installation. Affected scope is all versions of jquey, which have been unpublished from npm. Mitigation provided in the sources includes removing the pack...