Description
mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/480
Related Vulnerabilities
CVE-2022-24785 Vulnerability in maven package org.webjars.bower:moment
CVE-2020-2226 Vulnerability in maven package org.jenkins-ci.plugins:matrix-project
CVE-2016-10703 Vulnerability in npm package ecstatic
CVE-2016-10598 Vulnerability in npm package arrayfire-js
CVE-2019-10396 Vulnerability in maven package org.jenkins-ci.plugins:dashboard-view