Description
`fabric-js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/487
Related Vulnerabilities
CVE-2022-43183 Vulnerability in maven package com.xuxueli:xxl-job-core
CVE-2019-12043 Vulnerability in maven package org.webjars.bowergithub.jonschlinkert:remarkable
CVE-2022-24373 Vulnerability in npm package react-native-reanimated
CVE-2020-28268 Vulnerability in npm package controlled-merge
CVE-2023-40787 Vulnerability in maven package org.springblade:blade-core-tool