Lucene search
Veracode Vulnerability DatabaseVERACODE:5357HistoryNov 01, 2017 - 6:40 a.m.
System Compromise
2017-11-0106:40:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.002 Low
EPSS
Percentile
60.7%
npm-script-demo compromises the system. It is possible because the module can create an unauthorized connection to a command and control server when it is installed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| npm-script-demo | le | 1.0.2 |
References
Related
osv
osv
npm-script-demo is malware
2020-09-01 18:55:37
cve
cve
CVE-2017-16128
2018-06-07 02:29:03
prion
prion
Design/Logic Flaw
2018-06-07 02:29:00
github
github
npm-script-demo is malware
2020-09-01 18:55:37
nodejs
nodejs
Malicious Package
2017-08-07 18:25:16
cvelist
cvelist
CVE-2017-16128
2018-04-26 00:00:00
nvd
nvd
CVE-2017-16128
2018-06-07 02:29:03
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00