Description (CNA)
`d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HackerOne / d3.js node module | affected All versions |
CWE
CWE-506
References
ADP enrichment
No English description supplied.