Description
node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/502
Related Vulnerabilities
CVE-2020-2300 Vulnerability in maven package org.jenkins-ci.plugins:active-directory
CVE-2022-22984 Vulnerability in npm package snyk-docker-plugin
CVE-2019-3868 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2020-7021 Vulnerability in maven package org.elasticsearch:elasticsearch