Description
`nodefabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/488
Related Vulnerabilities
CVE-2017-16083 Vulnerability in npm package node-simple-router
CVE-2017-15719 Vulnerability in maven package com.googlecode.wicket-jquery-ui:wicket-kendo-ui
CVE-2020-11612 Vulnerability in maven package io.netty:netty-codec
CVE-2016-1000345 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on
CVE-2018-1288 Vulnerability in maven package org.apache.kafka:kafka_2.10