229 matches found
CVE-2017-16067
CVE-2017-16067 corresponds to the npm malware incident involving the node-opencv package. The package is a malicious module that hijacks and exfiltrates environment variables; all versions have been unpublished from the npm registry. Connected advisories confirm malware characteristics and sugges...
CVE-2017-16056
CVE-2017-16056 refers to the npm package mssql.js , reported as a malicious module designed to hijack environment variables. The available connected sources confirm that this package steals credentials from environment variables and exfiltrates them to attacker-controlled locations, and that all ...
CVE-2017-16073
CVE-2017-16073 concerns the npm package “noderequest,” a malware module published to hijack environment variables. The provided sources confirm that noderequest was designed to steal environment variables and exfiltrate data to attacker-controlled locations, and that all versions were unpublished...
CVE-2017-16075
CVE-2017-16075 corresponds to the http-proxy.js package that was published as malware with the intent to hijack environment variables and exfiltrate them to attacker-controlled locations. The npm advisory and related records note that all versions were unpublished from the npm registry. Connected...
CVE-2017-16078
shadowsock was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16066
CVE-2017-16066 corresponds to opencv.js, a malicious npm module published to hijack environment variables. The vulnerability was acknowledged across multiple sources (NVD, ENISA, GHSA, osv) with the module unpublished by npm. Affected content specifies a malware intent affecting the runtime envir...
CVE-2017-16078
CVE-2017-16078 concerns the npm package shadow sock—described in connected advisories as a malware that steals environment variables and exfiltrates to attacker-controlled endpoints. The npm advisory and GitHub/OSV entries confirm it has been unpublished from the npm registry; all versions are re...
CVE-2017-16076
proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16073
noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16070
nodecaffe is a malware package published to hijack environment variables and exfiltrate them to attacker-controlled locations. The npm-hosted module has been unpublished across all versions. Affected context from the provided documents shows malware behavior and cleanup guidance: remove the packa...
CVE-2017-16064
node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16060
CVE-2017-16060 describes the npm package babelcli, a malware package designed to hijack environment variables. The connected documents confirm that babelcli steals environment variables and exfiltrates them to attacker-controlled locations, and that all versions were unpublished from the npm regi...
CVE-2017-16072
nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
Malicious Module
nodefabric was a malicious module as it is developed to hijack environment variables...
Malicious Module
node-sqlite was a malicious module as it is developed to hijack environment variables and send it to attacker's controlled location...
CVE-2017-16054
nodefabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16050
sqlite.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16044
d3.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...