Lucene search
+L

8416 matches found

Veracode
Veracode
added 2018/06/07 7:00 a.m.18 views

Malicious Typo-Squatting

mongose is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01239EPSS
SaveExploits1References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:54 a.m.17 views

Malicious Typo-Squatting

proxy.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:41 a.m.18 views

Malicious Typo-Squatting

http-proxy.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01177EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:38 a.m.17 views

Malicious Typo-Squatting

crossenv is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01177EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:35 a.m.16 views

Malicious Typo-Squatting

noderequest is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:32 a.m.16 views

Malicious Typo-Squatting

nodemailer.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01177EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:29 a.m.16 views

Malicious Typo-Squatting

nodemailer-js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:26 a.m.18 views

Malicious Typo-Squatting

nodecaffe is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01177EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:23 a.m.18 views

Malicious Typo-Squatting

nodeffmpeg is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01177EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:20 a.m.20 views

Malicious Typo-Squatting

ffmepg is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01177EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:17 a.m.19 views

Malicious Typo-Squatting

node-opencv is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:09 a.m.20 views

Malicious Typo-Squatting

openssl.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01177EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:06 a.m.16 views

Malicious Typo-Squatting

node-openssl is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01177EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:03 a.m.19 views

Malicious Typo-Squatting

node-opensl is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 6:00 a.m.20 views

Malicious Typo-Squatting

babelcli is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01177EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 5:56 a.m.20 views

Malicious Typo-Squatting

mssql-node is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 5:52 a.m.17 views

Malicious Typo-Squatting

gruntcli is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 5:47 a.m.18 views

Malicious Typo-Squatting

mssql.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/06/07 5:40 a.m.19 views

Malicious Module

nodemssql is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/06/07 2:29 a.m.16 views

CVE-2017-16081

cross-env.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5CVSS7.5AI score0.01286EPSS
SaveExploits0References1
Rows per page
Query Builder