CVE-2017-16207

CVSS v3 Score
7.3
High
CVSS v2 Score
5.0
Medium

Vulnerability Description

discordi.js is a malicious module based on the discord.js library that exfiltrates login tokens to pastebin.

CVSS:7.5(High)

`d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

CVSS:7.5(High)

`jquery.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

CVSS:7.5(High)

`mariadb` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

CVSS:7.5(High)

mysqljs was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

CVSS:7.5(High)

`node-sqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

CVSS:7.5(High)

`nodesqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.