Description
The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Remediation
References
https://nodesecurity.io/advisories/544
Related Vulnerabilities
CVE-2023-33202 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on
CVE-2022-29252 Vulnerability in maven package org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki
CVE-2017-16076 Vulnerability in npm package proxy.js
CVE-2019-0195 Vulnerability in maven package org.apache.tapestry:tapestry-core
CVE-2021-32808 Vulnerability in maven package org.webjars.npm:ckeditor4