Description
nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/509
Related Vulnerabilities
CVE-2021-27738 Vulnerability in maven package org.apache.kylin:kylin-stream-coordinator
CVE-2020-8131 Vulnerability in maven package org.webjars.npm:yarn
CVE-2019-19771 Vulnerability in npm package bitcroe-lib
CVE-2019-20921 Vulnerability in maven package org.webjars.npm:bootstrap-select
CVE-2020-9489 Vulnerability in maven package org.apache.tika:tika-parsers