CVE-2017-16128

The CVE-2017-16128 entry concerns the npm-script-demo package, a malware that opens a connection to a command-and-control server after installation. Affected component is the npm-script-demo package (Node/NPM ecosystem); root cause is malware behavior enabling external control. Impact stated acro...