Weakness (CWE)
CWE-506: Embedded Malicious Code
The product contains code that appears to be malicious in nature.
How to prevent it (1 mitigation)
-
Implementation, Operation
Remove the malicious code and start an effort to ensure that no more malicious code exists. This may require a detailed review of all code, as it is possible to hide a serious attack in only one or two lines of code. These lines may be located almost anywhere in an application and may have been intentionally obfuscated by the attacker.
Source: MITRE CWE-506
459 results · Feed
-
High 7.5
coffe-script is malware
The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
-
High 7.5
node-openssl is malware
node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
Medium —
jquey is malware
The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
-
High 7.5
ffmepg is malware
ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
noderequest is malware
noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
nodefabric is malware
`nodefabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
sqlserver is malware
`sqlserver` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
node-sqlite is malware
`node-sqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
fabric-js is malware
`fabric-js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
d3.js is malware
`d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
sqliter is malware
`sqliter` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
jquery.js is malware
`jquery.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
node-fabric is malware
`node-fabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
nodesqlite is malware
`nodesqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
Medium —
sqlite.js is malware
`sqlite.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
Unscored —
`mariadb` was a malicious module published with the intent to hijack environment variables. It has been unpublished by …
-
High 7.5
mysqljs is malware
mysqljs was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
node-tkinter is malware
node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
tkinter is malware
tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.