CVE-2017-16067

node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16073

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Design/Logic Flaw

openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16064

node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16071

nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Design/Logic Flaw

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

shadowsock was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16067

node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16080

CVE-2017-16080 relates to the npm package nodesass, identified as malware that steals environment variables and exfiltrates them to attacker-controlled locations. The npm registry has unpublished all versions of this package, mitigating ongoing use. Connected advisories (GHSA-xfmw-2vmm-579c, npm ...

CVE-2017-16067

CVE-2017-16067 corresponds to the npm malware incident involving the node-opencv package. The package is a malicious module that hijacks and exfiltrates environment variables; all versions have been unpublished from the npm registry. Connected advisories confirm malware characteristics and sugges...