Description
node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/503
Related Vulnerabilities
CVE-2017-12610 Vulnerability in maven package org.apache.kafka:kafka
CVE-2018-3771 Vulnerability in npm package statics-server
CVE-2016-3092 Vulnerability in maven package commons-fileupload:commons-fileupload
CVE-2020-26217 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2022-31175 Vulnerability in npm package @ckeditor/ckeditor5-html-embed