Description (CNA)
The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HackerOne / jquey node module | affected 1.0.1 |
CWE
CWE-506
References
ADP enrichment
No English description supplied.