Description
`fabric-js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/487
Related Vulnerabilities
CVE-2018-1999026 Vulnerability in maven package de.tracetronic.jenkins.plugins:ecutest
CVE-2022-43404 Vulnerability in maven package org.jenkins-ci.plugins:script-security
CVE-2018-17420 Vulnerability in maven package com.zrlog:zrlog
CVE-2023-40346 Vulnerability in maven package io.jenkins.plugins:shortcut-job
CVE-2019-16776 Vulnerability in maven package org.webjars.bower:npm