Description
nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/511
Related Vulnerabilities
CVE-2022-23623 Vulnerability in npm package frourio
CVE-2022-23461 Vulnerability in npm package jodit
CVE-2023-49486 Vulnerability in maven package com.jfinal:jfinal
CVE-2022-24197 Vulnerability in maven package com.itextpdf:itext7-core
CVE-2019-10342 Vulnerability in maven package io.jenkins.docker:docker-plugin