CVE-2017-16070

nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16064

The CVE refers to the npm malware node-openssl, a malicious module published to hijack environment variables. Multiple sources confirm that the package stole environment variables and exfiltrated them to attacker-controlled locations, and that all versions have been unpublished from the npm regis...

CVE-2017-16056

CVE-2017-16056 refers to the npm package mssql.js , reported as a malicious module designed to hijack environment variables. The available connected sources confirm that this package steals credentials from environment variables and exfiltrates them to attacker-controlled locations, and that all ...

CVE-2017-16064

node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16060

babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16072

nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16058

CVE-2017-16058 corresponds to the npm package gruntcli, which was a malicious module designed to hijack environment variables. Multiple connected sources confirm that gruntcli behaved as malware, stealing environment variables and transmitting them to attacker-controlled locations; all versions h...

CVE-2017-16045

jquery.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16046

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16050

sqlite.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16044

d3.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16053

fabric-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16055

sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16052

node-fabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16046

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16048

node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

fabric-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

node-fabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16049

nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...