Lucene search
Veracode Vulnerability DatabaseVERACODE:6598HistoryJun 07, 2018 - 5:56 a.m.
Malicious Typo-Squatting
2018-06-0705:56:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.002 Low
EPSS
Percentile
54.0%
mssql-node is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mssql-node | le | 4.0.5 |
References
Related
cvelist
cvelist
CVE-2017-16059
2018-04-26 00:00:00
cve
cve
CVE-2017-16059
2018-06-07 02:29:00
prion
prion
Code injection
2018-06-07 02:29:00
nodejs
nodejs
Hijacked Environment Variables
2017-08-07 18:10:00
osv
osv
mssql-node is malware
2018-11-09 17:43:44
nvd
nvd
CVE-2017-16059
2018-06-07 02:29:00
github
github
mssql-node is malware
2018-11-09 17:43:44
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00