What the vulnerability does
01Description
The module npm-script-demo opened a connection to a command and control server. It has been removed from the npm registry.
CVSS base score
—
Key dates
02Disclosure timeline
June 7, 2018
CVE published
September 16, 2024
Record updated
External resources
03References
Related vulnerabilities
