EUVD-2020-0716

Malware in sbrugna...

GHSA-3RH7-VM4X-Q2HP sqlserver is malware

The sqlserver package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...

CVE-2017-16127

The module pandora-doomsday infects other modules. It's since been unpublished from the registry...