Code injection

node-fabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodefabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

fabric-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

sqlite.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16055

sqlserver was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16051

sqliter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16044

CVE-2017-16044 corresponds to the npm package d3.js , reported as a malware module that hijacks environment variables and exfiltrates them to attacker-controlled endpoints. The community advisories (GHSA, npm advisory) state that all versions have been unpublished from the npm registry. The root ...

CVE-2017-16045

jquery.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16055

CVE-2017-16055 corresponds to the npm package sqlserver, a malware module published to hijack environment variables. Connected sources confirm the malicious behavior (steals env vars and exfiltrates to attacker-controlled locations) and note that all versions have been unpublished from npm. The N...

CVE-2017-16052

node-fabric was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16048

node-sqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16049

nodesqlite was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16050

The CVE-2017-16050 entry concerns the sqlite.js npm package, a malware payload published to hijack environment variables. Multiple connected records confirm that sqlite.js steals environment variables and exfiltrates them to attacker-controlled locations, and that all versions were unpublished fr...

CVE-2017-16054

CVE-2017-16054 corresponds to the npm package nodefabric, which is described in connected advisories as malware that hijacks environment variables. The nodefabric package was published to steal environment variables and exfiltrate them to attacker-controlled locations; all versions have been unpu...

CVE-2017-16051

CVE-2017-16051 corresponds to the npm malware incident around the sqliter package. The sqliter module was published with the intent to hijack environment variables and exfiltrate data, and all versions were subsequently unpublished from npm. Multiple connected sources confirm the package’s malici...