CVE-2017-16044

d3.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16045

jquery.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16046

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodefabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

fabric-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

node-fabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

sqlite.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16055

sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16051

sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16044

CVE-2017-16044 corresponds to the npm package d3.js , reported as a malware module that hijacks environment variables and exfiltrates them to attacker-controlled endpoints. The community advisories (GHSA, npm advisory) state that all versions have been unpublished from the npm registry. The root ...

CVE-2017-16048

The CVE-2017-16048 entry covers the node-sqlite package, identified as malware that hijacks environment variables. Connected advisories confirm that the malware steals environment variables and exfiltrates to attacker-controlled locations; all versions were unpublished from npm. Practical impact ...

CVE-2017-16048

node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16051

CVE-2017-16051 corresponds to the npm malware incident around the sqliter package. The sqliter module was published with the intent to hijack environment variables and exfiltrate data, and all versions were subsequently unpublished from npm. Multiple connected sources confirm the package’s malici...

CVE-2017-16045

jquery.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16052

The CVE-2017-16052 entry concerns the npm package node-fabric, identified in multiple security advisories as malware that steals environment variables. Affected component: the node-fabric package (typo-squatting/malicious behavior) published to npm and later unpublished by npm. Root cause/attack ...