Description
The module npm-script-demo opened a connection to a command and control server. It has been removed from the npm registry.
Remediation
References
https://nodesecurity.io/advisories/481
Related Vulnerabilities
CVE-2020-7629 Vulnerability in npm package install-package
CVE-2016-10694 Vulnerability in npm package alto-saxophone
CVE-2016-6497 Vulnerability in maven package org.xbib.groovy:groovy-ldap
CVE-2021-38294 Vulnerability in maven package org.apache.storm:storm-server
CVE-2018-11804 Vulnerability in maven package org.apache.spark:spark-core