Description
`d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/497
Related Vulnerabilities
CVE-2019-10744 Vulnerability in maven package org.webjars.bower:lodash
CVE-2020-36321 Vulnerability in maven package com.vaadin:flow-server
CVE-2020-15119 Vulnerability in npm package auth0-lock
CVE-2019-10776 Vulnerability in npm package git-diff-apply
CVE-2023-31890 Vulnerability in maven package com.glazedlists:glazedlists