Description
`sqlserver` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/486
Related Vulnerabilities
CVE-2018-3785 Vulnerability in npm package git-dummy-commit
CVE-2020-9488 Vulnerability in maven package org.apache.logging.log4j:log4j
CVE-2017-16183 Vulnerability in npm package iter-server
CVE-2014-3623 Vulnerability in maven package org.apache.cxf:cxf-rt-security
CVE-2021-37695 Vulnerability in maven package org.webjars.bowergithub.ckeditor:ckeditor4