Description
ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/507
Related Vulnerabilities
CVE-2021-25931 Vulnerability in maven package org.opennms:opennms-webapp
CVE-2022-20612 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2023-25194 Vulnerability in maven package org.apache.kafka:kafka-clients
CVE-2022-29256 Vulnerability in npm package sharp
CVE-2021-41246 Vulnerability in npm package express-openid-connect