Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-16070

nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

Description

nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HackerOne nodecaffe node module

  • All versionsaffected

References