Description
mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/485
Related Vulnerabilities
CVE-2023-26049 Vulnerability in maven package org.eclipse.jetty:jetty-server
CVE-2020-28459 Vulnerability in npm package markdown-it-decorate
CVE-2020-7707 Vulnerability in npm package property-expr
CVE-2020-2290 Vulnerability in maven package org.biouno:uno-choice
CVE-2022-24794 Vulnerability in npm package express-openid-connect