Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2017-16044`d3.js` was a malicious module published with the intent to hijack environment variables.npm · d3.js
- CVE-2017-16045`jquery.js` was a malicious module published with the intent to hijack environment variables.npm · jquery.js
- CVE-2017-16048`node-sqlite` was a malicious module published with the intent to hijack environment variables.npm · node-sqlite
- CVE-2017-16049`nodesqlite` was a malicious module published with the intent to hijack environment variables.npm · nodesqlite
- CVE-2017-16050`sqlite.js` was a malicious module published with the intent to hijack environment variables.npm · sqlite.js
- CVE-2017-16051`sqliter` was a malicious module published with the intent to hijack environment variables.npm · sqliter
- CVE-2017-16052`node-fabric` was a malicious module published with the intent to hijack environment variables.npm · node-fabric
- CVE-2017-16053`fabric-js` was a malicious module published with the intent to hijack environment variables.npm · fabric-js
- CVE-2017-16054`nodefabric` was a malicious module published with the intent to hijack environment variables.npm · nodefabric
- CVE-2017-16055`sqlserver` was a malicious module published with the intent to hijack environment variables.npm · sqlserver
- CVE-2016-10636grunt-ccompiler is a Closure Compiler Grunt Plugin.npm · grunt-ccompiler
- CVE-2016-10637haxe-dev is a cross-platform toolkit.npm · haxe-dev
- CVE-2016-10638js-given is a JavaScript frontend to jgiven.npm · js-given · fixed in 0.0.18
- CVE-2016-10639redis-srvr is a npm wrapper for redis-server.npm · redis-srvr
- CVE-2016-10640node-thulac is a node binding for thulac.npm · node-thulac
- CVE-2016-10641node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.npm · node-bsdiff-android
- CVE-2016-10642cmake installs the cmake x86 linux binaries.npm · cmake
- CVE-2016-10643jstestdriver is a wrapper for Google's jstestdriver.npm · jstestdriver
- CVE-2016-10644slimerjs-edge is a npm wrapper for installing the bleeding edge version of slimerjs.npm · slimerjs-edge
- CVE-2016-10645grunt-images is a grunt plugin for processing images.npm · grunt-images
- CVE-2016-10646resourcehacker is a Node wrapper of Resource Hacker (windows executable resource editor).npm · resourcehacker
- CVE-2016-10647node-air-sdk is an AIR SDK for nodejs.npm · node-air-sdk
- CVE-2016-10648marionette-socket-host is a marionette-js-runner host for sending actions over a socket.npm · marionette-socket-host
- CVE-2016-10649frames-compiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.npm · frames-compiler
- CVE-2016-10651webdriver-launcher is a Node.js Selenium Webdriver Launcher.npm · webdriver-launcher
- CVE-2016-10652prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation.npm · prebuild-lwip
- CVE-2016-10653xd-testing is a testing library for cross-device (XD) web applications.npm · xd-testing
- CVE-2016-10654sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks.npm · sfml
- CVE-2016-10655The clang-extra module installs LLVM's clang-extra tools.npm · clang-extra
- CVE-2016-10656qbs is a build tool that helps simplify the build process for developing projects across multiple platforms.npm · qbs