Description
opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/505
Related Vulnerabilities
CVE-2018-6561 Vulnerability in maven package org.webjars.npm:dijit
CVE-2021-30246 Vulnerability in npm package jsrsasign
CVE-2021-33605 Vulnerability in maven package com.vaadin:vaadin-checkbox-flow
CVE-2018-6561 Vulnerability in npm package dijit
CVE-2020-2321 Vulnerability in maven package org.jenkins-ci.plugins:shelve-project-plugin