Description
`sqlite.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/491
Related Vulnerabilities
CVE-2017-17868 Vulnerability in maven package com.liferay.portal:portal-service
CVE-2019-0205 Vulnerability in maven package org.webjars.bower:thrift
CVE-2017-16066 Vulnerability in npm package opencv.js
CVE-2018-1000412 Vulnerability in maven package org.jenkins-ci.plugins:jira
CVE-2023-43498 Vulnerability in maven package org.jenkins-ci.main:jenkins-core