7 matches found
noderequest is malware
The noderequest package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...
Unspecified vulnerability in noderequest
noderequest is a package of request nodes for use in Node.js. A security vulnerability exists in noderequest. An attacker can exploit the vulnerability to steal environment variables...
Malicious JavaScript Package Detection
Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Design/Logic Flaw
noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16073
CVE-2017-16073 concerns the npm package “noderequest,” a malware module published to hijack environment variables. The provided sources confirm that noderequest was designed to steal environment variables and exfiltrate data to attacker-controlled locations, and that all versions were unpublished...
