Description
mysqljs was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/494
Related Vulnerabilities
CVE-2020-26870 Vulnerability in npm package dompurify
CVE-2022-25209 Vulnerability in maven package org.jenkins-ci.plugins:sinatra-chef-builder
CVE-2015-5377 Vulnerability in maven package org.elasticsearch:elasticsearch
CVE-2017-2610 Vulnerability in maven package org.jenkins-ci.main:jenkins-war
CVE-2013-2172 Vulnerability in maven package org.apache.santuario:xmlsec