Description
tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/500
Related Vulnerabilities
CVE-2021-26291 Vulnerability in maven package org.apache.maven:apache-maven
CVE-2021-39236 Vulnerability in maven package org.apache.ozone:ozone-main
CVE-2019-16542 Vulnerability in maven package org.jenkins-ci.plugins:anchore-container-scanner
CVE-2023-40013 Vulnerability in npm package external-svg-loader
CVE-2022-36901 Vulnerability in maven package org.jenkins-ci.plugins:http_request