Lucene search
Veracode Vulnerability DatabaseVERACODE:6546HistoryJun 05, 2018 - 2:51 a.m.
Malicious Typo-Squatting
2018-06-0502:51:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
53.8%
jquery.js is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables.
References
Related
cvelist
cvelist
CVE-2017-16045
2018-04-26 00:00:00
nvd
nvd
CVE-2017-16045
2018-06-04 19:29:02
cve
cve
CVE-2017-16045
2018-06-04 19:29:02
nodejs
nodejs
Hijacked Environment Variables
2017-08-08 21:44:53
github
github
jquery.js is malware
2018-07-23 20:54:24
osv
osv
jquery.js is malware
2018-07-23 20:54:24
prion
prion
Code injection
2018-06-04 19:29:00
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00