Description
shadowsock was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/517
Related Vulnerabilities
CVE-2020-10544 Vulnerability in maven package org.primefaces:primefaces
CVE-2020-10705 Vulnerability in maven package io.undertow:undertow-core
CVE-2022-35143 Vulnerability in npm package raneto
CVE-2022-23505 Vulnerability in npm package passport-wsfed-saml2
CVE-2023-26136 Vulnerability in maven package org.webjars.bowergithub.salesforce:tough-cookie