Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2018/09/17 8:39 p.m.18 views

noderequest is malware

The noderequest package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.00257EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2018/06/13 12:0 a.m.1 views

Unspecified vulnerability in noderequest

noderequest is a package of request nodes for use in Node.js. A security vulnerability exists in noderequest. An attacker can exploit the vulnerability to steal environment variables...

7.5CVSS7.6AI score0.00257EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/06/12 12:0 a.m.72 views

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

10CVSS7.3AI score0.17051EPSS
Exploits4References101
Prion
Prion
added 2018/06/07 2:29 a.m.9 views

Design/Logic Flaw

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

5CVSS7.4AI score0.00257EPSS
Exploits0References1
CVE
CVE
added 2018/06/07 2:0 a.m.41 views

CVE-2017-16073

CVE-2017-16073 concerns the npm package “noderequest,” a malware module published to hijack environment variables. The provided sources confirm that noderequest was designed to steal environment variables and exfiltrate data to attacker-controlled locations, and that all versions were unpublished...

7.5CVSS7.4AI score0.00257EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/06/07 2:0 a.m.14 views

CVE-2017-16073

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5AI score0.00257EPSS
Exploits0References1
Rows per page
Query Builder