CVE-2017-16060

CVE-2017-16060 describes the npm package babelcli, a malware package designed to hijack environment variables. The connected documents confirm that babelcli steals environment variables and exfiltrates them to attacker-controlled locations, and that all versions were unpublished from the npm regi...

CVE-2017-16072

nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16064

node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16073

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Malicious Module

nodefabric was a malicious module as it is developed to hijack environment variables...

Malicious Module

node-sqlite was a malicious module as it is developed to hijack environment variables and send it to attacker's controlled location...

CVE-2017-16054

nodefabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16050

sqlite.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16045

jquery.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16046

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16044

d3.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodefabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

node-fabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16045

CVE-2017-16045 corresponds to a malicious npm package named jquery.js that hijacks environment variables. The malware was published as a package and later unpublished from the npm registry; it targets any environment where the package is installed, exfiltrating sensitive values to attacker-contro...

CVE-2017-16051

sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...