Description
mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/480
Related Vulnerabilities
CVE-2021-21366 Vulnerability in maven package org.webjars.npm:xmldom
CVE-2021-43838 Vulnerability in npm package jsx-slack
CVE-2020-7686 Vulnerability in npm package rollup-plugin-dev-server
CVE-2017-4960 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-uaa
CVE-2016-5007 Vulnerability in maven package org.springframework:spring-webmvc