Description
`nodefabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/488
Related Vulnerabilities
CVE-2022-1243 Vulnerability in maven package org.webjars.npm:urijs
CVE-2021-37136 Vulnerability in maven package io.netty:netty-codec
CVE-2020-8134 Vulnerability in npm package ghost
CVE-2017-12612 Vulnerability in maven package org.apache.spark:spark-core_2.10
CVE-2018-7651 Vulnerability in maven package org.webjars.npm:ssri