Description
openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/504
Related Vulnerabilities
CVE-2021-32014 Vulnerability in npm package xlsx
CVE-2020-14966 Vulnerability in maven package org.webjars.bowergithub.kjur:jsrsasign
CVE-2019-19771 Vulnerability in npm package bitcoimjs-lib
CVE-2018-21270 Vulnerability in npm package stringstream
CVE-2021-21349 Vulnerability in maven package com.thoughtworks.xstream:xstream