Description
nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/484
Related Vulnerabilities
CVE-2022-29002 Vulnerability in maven package com.xuxueli:xxl-job
CVE-2017-16121 Vulnerability in npm package datachannel-client
CVE-2020-4076 Vulnerability in npm package electron
CVE-2022-29894 Vulnerability in npm package strapi
CVE-2015-5347 Vulnerability in maven package org.apache.wicket:wicket-extensions