Description
mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/516
Related Vulnerabilities
CVE-2023-0674 Vulnerability in maven package com.xuxueli:xxl-job-core
CVE-2021-3189 Vulnerability in npm package slashify
CVE-2017-16102 Vulnerability in npm package serverhuwenhui
CVE-2021-43142 Vulnerability in maven package com.wutka:jox
CVE-2023-22893 Vulnerability in npm package @strapi/plugin-users-permissions