Lucene search
Veracode Vulnerability DatabaseVERACODE:6743HistoryJun 08, 2018 - 4:30 a.m.
Malicious Typo-Squatting
2018-06-0804:30:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.002 Low
EPSS
Percentile
53.9%
jquey is a maliciously typo-squatting package. During the installation of this package, the user’s private SSH key and bash history are set to a third party server.
References
Related
nodejs
nodejs
Exfiltrates data on installation
2017-10-04 23:30:21
prion
prion
Information disclosure
2018-06-07 02:29:00
cvelist
cvelist
CVE-2017-16204
2018-04-26 00:00:00
nvd
nvd
CVE-2017-16204
2018-06-07 02:29:06
osv
osv
jquey is malware
2018-08-06 21:41:38
cve
cve
CVE-2017-16204
2018-06-07 02:29:06
github
github
jquey is malware
2018-08-06 21:41:38
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00