10 matches found
nodemailer-js is malware
The nodemailer-js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...
GHSA-XH56-3F5W-9H25 nodemailer-js is malware
The nodemailer-js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...
Malicious JavaScript Package Detection
Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Malicious Typo-Squatting
nodemailer-js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...
Code injection
nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16071
nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16071
CVE-2017-16071 concerns the npm package nodemailer-js , described as malware that hijacks environment variables and exfiltrates them to attacker-controlled locations. All versions were unpublished from the npm registry. Connected advisories corroborate malware behavior and provide remediation gui...
CVE-2017-16071
nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
PT-2018-6099
Name of the Vulnerable Software and Affected Versions: nodemailer-js versions all Description: The issue concerns a malicious module named nodemailer-js that was published with the intent to hijack environment variables, specifically designed to steal and send them to attacker-controlled location...
