CVE-2017-16067

node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16064

node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16072

nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16063

node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16060

babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16067

node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Design/Logic Flaw

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Denial of service

opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16073

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Design/Logic Flaw

http-proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16066

CVE-2017-16066 corresponds to opencv.js, a malicious npm module published to hijack environment variables. The vulnerability was acknowledged across multiple sources (NVD, ENISA, GHSA, osv) with the module unpublished by npm. Affected content specifies a malware intent affecting the runtime envir...

CVE-2017-16075

CVE-2017-16075 corresponds to the http-proxy.js package that was published as malware with the intent to hijack environment variables and exfiltrate them to attacker-controlled locations. The npm advisory and related records note that all versions were unpublished from the npm registry. Connected...

CVE-2017-16070

nodecaffe is a malware package published to hijack environment variables and exfiltrate them to attacker-controlled locations. The npm-hosted module has been unpublished across all versions. Affected context from the provided documents shows malware behavior and cleanup guidance: remove the packa...

CVE-2017-16070

nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...