CVE-2017-16067

CVE-2017-16067 corresponds to the npm malware incident involving the node-opencv package. The package is a malicious module that hijacks and exfiltrates environment variables; all versions have been unpublished from the npm registry. Connected advisories confirm malware characteristics and sugges...

CVE-2017-16067: Embedded Malicious Code

node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

PT-2018-6095

Name of the Vulnerable Software and Affected Versions: node-opencv versions all Description: The issue concerns a malicious module named node-opencv, which was designed to hijack environment variables and send them to attacker-controlled locations. All versions of this module have been unpublishe...

Hijacked Environment Variables

Overview The node-opencv package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real...