2 matches found
node-tkinter is malware
The node-tkinter package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...
7.5CVSS7.3AI score0.01083EPSS
SaveExploits0References3Affected Software1
GHSA-X52F-H74P-9JH8 node-sqlite is malware
The node-sqlite package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...
7.5CVSS7.6AI score0.01177EPSS
SaveExploits0References3
20