Description
proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/515
Related Vulnerabilities
CVE-2021-23358 Vulnerability in maven package org.webjars.bower:underscore
CVE-2011-4838 Vulnerability in maven package org.jruby:jruby-stdlib
CVE-2023-46298 Vulnerability in npm package next
CVE-2020-7772 Vulnerability in npm package doc-path
CVE-2023-46654 Vulnerability in maven package org.jenkins-ci.plugins:electricflow