~ / search / GHSA-5hxw-r847-qfwp

GHSA-5hxw-r847-qfwp

opencv.js is malware

Source: GitHub Advisory Database (reviewed) High CVE-2017-16066

Packages

EcosystemPackageAffectedFixed in
npm opencv.js <= 1.2.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

References

External links from the advisory. They lead to third-party sites.