Vulnerabilities > Information Exposure
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-06-07 | CVE-2017-16206 | Information Exposure vulnerability in Coffescript Project Coffescript 1.0.1 The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. | 7.5 |
| 2018-06-07 | CVE-2017-16205 | Information Exposure vulnerability in Coffescript Project Coffescript 1.0.1 The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. | 7.5 |
| 2018-06-07 | CVE-2017-16204 | Information Exposure vulnerability in Jquey Project Jquey 1.0.1 The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. | 7.5 |
| 2018-06-07 | CVE-2017-16203 | Information Exposure vulnerability in Coffescript Project Coffescript 1.0.1 The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. | 7.5 |
| 2018-06-07 | CVE-2017-16202 | Information Exposure vulnerability in Cofeescript Project Cofeescript 0.0.1 The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. | 7.5 |
| 2018-06-07 | CVE-2017-16126 | Information Exposure vulnerability in Botbait Project Botbait 1.0.0/1.0.1/2.0.0 The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. | 5.3 |
| 2018-06-07 | CVE-2017-16081 | Information Exposure vulnerability in Cross-Env.Js Project Cross-Env.Js cross-env.js was a malicious module published with the intent to hijack environment variables. | 7.5 |
| 2018-06-07 | CVE-2017-16080 | Information Exposure vulnerability in Nodesass Project Nodesass nodesass was a malicious module published with the intent to hijack environment variables. | 7.5 |
| 2018-06-07 | CVE-2017-16079 | Information Exposure vulnerability in SMB Project SMB smb was a malicious module published with the intent to hijack environment variables. | 7.5 |
| 2018-06-07 | CVE-2017-16078 | Information Exposure vulnerability in Shadowsock Project Shadowsock shadowsock was a malicious module published with the intent to hijack environment variables. | 7.5 |