CVE-2017-16052

The CVE-2017-16052 entry concerns the npm package node-fabric, identified in multiple security advisories as malware that steals environment variables. Affected component: the node-fabric package (typo-squatting/malicious behavior) published to npm and later unpublished by npm. Root cause/attack ...