GHSA-XFMW-2VMM-579C Nodesass is malware

The nodesass package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...

react-cms-editor (=0.1.71) potentially affected by CVE-2017-16080 via nodesass (=0.0.2-security)

nodesass NPM version =0.0.2-security is affected by a known vulnerability. The following packages have a transitive dependency on nodesass and may be impacted: - react-cms-editor =0.1.71 Source cves: CVE-2017-16080 Source advisory: OSV:GHSA-XFMW-2VMM-579C...

Nodesass is malware

The nodesass package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2017-16080

nodesass was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodesass was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16080

CVE-2017-16080 relates to the npm package nodesass, identified as malware that steals environment variables and exfiltrates them to attacker-controlled locations. The npm registry has unpublished all versions of this package, mitigating ongoing use. Connected advisories (GHSA-xfmw-2vmm-579c, npm ...

CVE-2017-16080

nodesass was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...