Malicious Module in OpenCV.js Affects Node.js Applications

CVE-2017-16066

What is CVE-2017-16066?

OpenCV.js, a JavaScript binding for OpenCV, was compromised by a malicious module designed to hijack environment variables. This potentially exposes sensitive information within Node.js applications. The malicious code has been removed from npm, but users should remain vigilant and assess their use of OpenCV.js to mitigate any residual risks associated with this exploitation.

References