CVE-2017-16128

Publication date

2018-06-07 02:00:00

Family

hackerone

State

PUBLISHED

Description

The module npm-script-demo opened a connection to a command and control server. It has been removed from the npm registry.