Lucene search
Veracode Vulnerability DatabaseVERACODE:6604HistoryJun 07, 2018 - 6:17 a.m.
Malicious Typo-Squatting
2018-06-0706:17:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
53.9%
node-opencv is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node-opencv | le | 1.0.2 |
References
Related
nodejs
nodejs
Hijacked Environment Variables
2017-08-08 22:53:11
osv
osv
node-opencv is malware
2018-08-29 23:50:59
nvd
nvd
CVE-2017-16067
2018-06-07 02:29:00
cve
cve
CVE-2017-16067
2018-06-07 02:29:00
github
github
node-opencv is malware
2018-08-29 23:50:59
prion
prion
Code injection
2018-06-07 02:29:00
cvelist
cvelist
CVE-2017-16067
2018-04-26 00:00:00
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00