Description
noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/512
Related Vulnerabilities
CVE-2016-1000344 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on
CVE-2020-36049 Vulnerability in maven package org.webjars.npm:socket.io-parser
CVE-2017-12631 Vulnerability in maven package org.apache.cxf.fediz:fediz-spring
CVE-2021-26117 Vulnerability in maven package org.apache.activemq:artemis-server
CVE-2023-24187 Vulnerability in maven package com.bstek.ureport:ureport2-core