Description (CNA)
nodesass was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HackerOne / nodesass node module | affected All versions |
CWE
CWE-506
References
ADP enrichment
No English description supplied.