Skip to content
OpenAdvisories
Medium CVE-2017-16076 EUVD-2018-0421GHSA-qj73-v688-wqxf

Hijacked Environment Variables in proxy.js

Published Jun 7, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Description

proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

Affected products

VendorProductAffectedFixed
HackerOne proxy.js node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm proxy.js <= 1.0.2 — GHSA-qj73-v688-wqxf

References