Lucene search
Veracode Vulnerability DatabaseVERACODE:6423HistoryMay 30, 2018 - 5:56 a.m.
Malicious Typo-Squatting
2018-05-3005:56:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.002 Low
EPSS
Percentile
53.8%
The node-tkinter packages is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node-tkinter | le | 1.0.2 |
References
Related
cvelist
cvelist
CVE-2017-16062
2018-04-26 00:00:00
nodejs
nodejs
Hijacked Environment Variables
2017-08-08 22:24:52
prion
prion
Code injection
2018-05-29 20:29:00
nvd
nvd
CVE-2017-16062
2018-05-29 20:29:02
osv
osv
node-tkinter is malware
2018-11-01 14:47:43
github
github
node-tkinter is malware
2018-11-01 14:47:43
cve
cve
CVE-2017-16062
2018-05-29 20:29:02
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00