Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6614
HistoryJun 07, 2018 - 6:54 a.m.

Malicious Typo-Squatting

2018-06-0706:54:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.002 Low

EPSS

Percentile

54.0%

proxy.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables.

CPENameOperatorVersion
proxy.jsle1.0.2

0.002 Low

EPSS

Percentile

54.0%