Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2017-16057nodemssql was a malicious module published with the intent to hijack environment variables.npm · nodemssql
- CVE-2017-16058gruntcli was a malicious module published with the intent to hijack environment variables.npm · gruntcli
- CVE-2017-16059mssql-node was a malicious module published with the intent to hijack environment variables.npm · mssql-node
- CVE-2017-16060babelcli was a malicious module published with the intent to hijack environment variables.npm · babelcli
- CVE-2017-16063node-opensl was a malicious module published with the intent to hijack environment variables.npm · node-opensl
- CVE-2017-16064node-openssl was a malicious module published with the intent to hijack environment variables.npm · node-openssl
- CVE-2017-16065openssl.js was a malicious module published with the intent to hijack environment variables.npm · openssl.js
- CVE-2017-16066opencv.js was a malicious module published with the intent to hijack environment variables.npm · opencv.js
- CVE-2017-16067node-opencv was a malicious module published with the intent to hijack environment variables.npm · node-opencv
- CVE-2017-16068ffmepg was a malicious module published with the intent to hijack environment variables.npm · ffmepg
- CVE-2017-16069nodeffmpeg was a malicious module published with the intent to hijack environment variables.npm · nodeffmpeg
- CVE-2017-16070nodecaffe was a malicious module published with the intent to hijack environment variables.npm · nodecaffe
- CVE-2017-16071nodemailer-js was a malicious module published with the intent to hijack environment variables.npm · nodemailer-js
- CVE-2017-16072nodemailer.js was a malicious module published with the intent to hijack environment variables.npm · nodemailer.js
- CVE-2017-16073noderequest was a malicious module published with the intent to hijack environment variables.npm · noderequest
- CVE-2017-16074crossenv was a malicious module published with the intent to hijack environment variables.npm · crossenv
- CVE-2017-16075http-proxy.js was a malicious module published with the intent to hijack environment variables.npm · http-proxy.js
- CVE-2017-16076proxy.js was a malicious module published with the intent to hijack environment variables.npm · proxy.js
- CVE-2017-16077mongose was a malicious module published with the intent to hijack environment variables.npm · mongose
- CVE-2017-16078shadowsock was a malicious module published with the intent to hijack environment variables.npm · shadowsock
- CVE-2017-16079smb was a malicious module published with the intent to hijack environment variables.npm · smb
- CVE-2017-16080nodesass was a malicious module published with the intent to hijack environment variables.npm · nodesass
- CVE-2017-16081cross-env.js was a malicious module published with the intent to hijack environment variables.npm · cross-env.js
- CVE-2017-16086ua-parser is a port of Browserscope's user agent parser.npm · ua-parser
- CVE-2017-16088The safe-eval module describes itself as a safer version of eval.npm · safe-eval
- CVE-2017-16089serverlyr is a simple http server.npm · serverlyr
- CVE-2017-16090fsk-server is a simple http server.npm · fsk-server
- CVE-2017-16091xtalk helps your browser talk to nodex, a simple web framework.npm · xtalk
- CVE-2017-16092Sencisho is a simple http server for local development.npm · sencisho
- CVE-2017-16093cyber-js is a simple http server.npm · cyber-js