227 matches found
Code injection
node-fabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
Code injection
node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
Code injection
sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
Code injection
nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
Code injection
mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16051
sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16045
CVE-2017-16045 corresponds to a malicious npm package named jquery.js that hijacks environment variables. The malware was published as a package and later unpublished from the npm registry; it targets any environment where the package is installed, exfiltrating sensitive values to attacker-contro...
CVE-2017-16045
jquery.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16051
CVE-2017-16051 corresponds to the npm malware incident around the sqliter package. The sqliter module was published with the intent to hijack environment variables and exfiltrate data, and all versions were subsequently unpublished from npm. Multiple connected sources confirm the package’s malici...
CVE-2017-16054
CVE-2017-16054 corresponds to the npm package nodefabric, which is described in connected advisories as malware that hijacks environment variables. The nodefabric package was published to steal environment variables and exfiltrate them to attacker-controlled locations; all versions have been unpu...
CVE-2017-16055
CVE-2017-16055 corresponds to the npm package sqlserver, a malware module published to hijack environment variables. Connected sources confirm the malicious behavior (steals env vars and exfiltrates to attacker-controlled locations) and note that all versions have been unpublished from npm. The N...
CVE-2017-16054
nodefabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16053
The CVE-2017-16053 issue involves the npm package fabric-js , published as malware intended to hijack environment variables. Several connected sources (GHSA advisory, npm advisory, and CVE records) confirm that all versions were unpublished from the npm registry and that the malware steals enviro...
Code injection
node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
Code injection
mysqljs was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
Code injection
tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16061
The CVE refers to the npm package named tkinter, described as malware that steals environment variables and exfiltrates them to attacker-controlled locations. All versions have been unpublished from the npm registry. The MITRE-style impact is primarily confidentiality loss, with practical risk th...
CVE-2017-16062
node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
MISP cross-site scripting vulnerability (CNVD-2018-06388)
MISP is a suite of open source software solutions for collecting, storing, distributing and sharing cybersecurity metrics and threats cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in the app/View/Events/resolvedattributes.ctp file in MISP. A remote...
