opencv.js is malware

Description

opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 1.2.1

References

• GHSA-5hxw-r847-qfwp
• CVE-2017-16066
• CWE-506
• CAPEC-310
• OWASP 2021-A6

Related Issues

• d3.js is malware - CVE-2017-16044
• openssl.js is malware - CVE-2017-16065
• Arbitrary Code Execution in mathjs - mathjs - CVE-2017-1001002
• Moderate severity vulnerability that affects marked - CVE-2017-17461

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

opencv.js