Description
The module npm-script-demo opened a connection to a command and control server. It has been removed from the npm registry.
Remediation
References
https://nodesecurity.io/advisories/481
Related Vulnerabilities
CVE-2019-19771 Vulnerability in npm package singale
CVE-2016-10655 Vulnerability in npm package clang-extra
CVE-2022-25901 Vulnerability in maven package org.webjars.npm:cookiejar
CVE-2022-22965 Vulnerability in maven package org.springframework:spring-webflux
CVE-2019-19899 Vulnerability in maven package com.mitchellbosecke:pebble