Weakness (CWE)
CWE-506: Embedded Malicious Code
The product contains code that appears to be malicious in nature.
How to prevent it (1 mitigation)
-
Implementation, Operation
Remove the malicious code and start an effort to ensure that no more malicious code exists. This may require a detailed review of all code, as it is possible to hide a serious attack in only one or two lines of code. These lines may be located almost anywhere in an application and may have been intentionally obfuscated by the attacker.
Source: MITRE CWE-506
53 results · Clear filters · Feed
-
High 7.5
noderequest is malware
noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
nodefabric is malware
`nodefabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
sqlserver is malware
`sqlserver` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
node-sqlite is malware
`node-sqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
fabric-js is malware
`fabric-js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
d3.js is malware
`d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
sqliter is malware
`sqliter` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
jquery.js is malware
`jquery.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
node-fabric is malware
`node-fabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
nodesqlite is malware
`nodesqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
mysqljs is malware
mysqljs was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
node-tkinter is malware
node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
tkinter is malware
tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.