Lucene search
Veracode Vulnerability DatabaseVERACODE:6619HistoryJun 07, 2018 - 7:08 a.m.
Malicious Typo-Squatting
2018-06-0707:08:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.002
Percentile
53.8%
nodesass is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables.
References
Related
prion
prion
Code injection
2018-06-07 02:29:00
nodejs
nodejs
Hijacked Environment Variables
2017-08-08 23:59:49
cve
cve
CVE-2017-16080
2018-06-07 02:29:01
cvelist
cvelist
CVE-2017-16080
2018-06-07 02:00:00
github
github
Nodesass is malware
2020-09-01 18:59:50
nvd
nvd
CVE-2017-16080
2018-06-07 02:29:01
osv
osv
Nodesass is malware
2020-09-01 18:59:50
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00