Environment Variable Hijacking Vulnerability in openssl.js from npm

CVE-2017-16065

What is CVE-2017-16065?

The openssl.js module, available through npm, was discovered to be a malicious package designed to hijack environment variables, posing significant security risks to users. This module has been removed from the npm registry to mitigate the threat, but users who installed it may need to take precautions to ensure their systems remain secure.

References