Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2018-06-07	CVE-2017-16128	Incorrect Default Permissions vulnerability in Npm-Script-Demo Project Npm-Script-Demo 0.0.1 The module npm-script-demo opened a connection to a command and control server. network low complexity npm-script-demo-project CWE-276 critical	10.0

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.