Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2018/07/23 8:50 p.m.18 views

nodesqlite is malware

The nodesqlite package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.00257EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/07/23 8:50 p.m.11 views

GHSA-WWF2-5CJ8-JX6W nodesqlite is malware

The nodesqlite package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.00257EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2018/06/12 12:0 a.m.72 views

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

10CVSS7.3AI score0.17051EPSS
Exploits4References101
Veracode
Veracode
added 2018/06/05 2:54 a.m.18 views

Malicious Typo-Squatting

nodesqlite is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.00257EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2018/06/04 7:29 p.m.10 views

CVE-2017-16049

nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5CVSS7.5AI score0.00257EPSS
Exploits0References1
Cvelist
Cvelist
added 2018/06/04 7:0 p.m.15 views

CVE-2017-16049

nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5AI score0.00257EPSS
Exploits0References1
Node.js
Node.js
added 2017/08/08 9:40 p.m.19 views

Hijacked Environment Variables

Overview The nodesqlite package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real...

5CVSS4.3AI score0.00257EPSS
Exploits0Affected Software1
Rows per page
Query Builder