Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6420
HistoryMay 30, 2018 - 5:37 a.m.

Malicious Typo-Squatting

2018-05-3005:37:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.002 Low

EPSS

Percentile

53.8%

The mysqljs packages is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables.

CPENameOperatorVersion
mysqljsle2.13.0

0.002 Low

EPSS

Percentile

53.8%