Lucene search
Veracode Vulnerability DatabaseVERACODE:6615HistoryJun 07, 2018 - 7:00 a.m.
Malicious Typo-Squatting
2018-06-0707:00:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.006
Percentile
78.3%
mongose is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables.
References
Related
github
github
mongose is malware
2018-10-10 17:28:21
nvd
nvd
CVE-2017-16077
2018-06-07 02:29:01
cve
cve
CVE-2017-16077
2018-06-07 02:29:01
nodejs
nodejs
Hijacked Environment Variables
2017-08-08 23:58:13
prion
prion
Code injection
2018-06-07 02:29:00
osv
osv
mongose is malware
2018-10-10 17:28:21
cvelist
cvelist
CVE-2017-16077
2018-06-07 02:00:00
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00