Lucene search
+L

10 matches found

OSV
OSV
•added 2018/07/23 8:50 p.m.•25 views

GHSA-WWF2-5CJ8-JX6W nodesqlite is malware

The nodesqlite package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01158EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2018/07/23 8:50 p.m.•35 views

nodesqlite is malware

The nodesqlite package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01158EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
•added 2018/06/12 12:00 a.m.•321 views

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

10CVSS7.6AI score0.01452EPSS
SaveExploits4References108
Veracode
Veracode
•added 2018/06/05 2:54 a.m.•34 views

Malicious Typo-Squatting

nodesqlite is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01158EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/06/04 7:29 p.m.•28 views

CVE-2017-16049

nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5CVSS7.5AI score0.01158EPSS
SaveExploits0References1
Mend
Mend
•added 2018/06/04 7:00 p.m.•9 views

CVE-2017-16049

"nodesqlite" was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

8.7CVSS0.01158EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2018/06/04 7:00 p.m.•52 views

CVE-2017-16049

nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5AI score0.01158EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/04 12:00 a.m.•9 views

CVE-2017-16049: Embedded Malicious Code

nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5CVSS7.2AI score0.01158EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/06/04 12:00 a.m.•10 views

PT-2018-6077

Name of the Vulnerable Software and Affected Versions: nodesqlite versions all Description: The issue concerns a malicious module named nodesqlite that was designed to steal environment variables and send them to attacker-controlled locations. All versions of this module have been unpublished fro...

7.5CVSS0.01158EPSS
SaveExploits0References5
nodejs
nodejs
•added 2017/08/08 9:40 p.m.•37 views

Hijacked Environment Variables

Overview The nodesqlite package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real...

5CVSS4.3AI score0.01158EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder