Description
`nodefabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/488
Related Vulnerabilities
CVE-2021-23396 Vulnerability in npm package lutils
CVE-2022-0436 Vulnerability in npm package grunt
CVE-2022-31170 Vulnerability in npm package @openzeppelin/contracts-upgradeable
CVE-2020-7676 Vulnerability in maven package org.webjars.npm:angular
CVE-2017-15695 Vulnerability in maven package org.apache.geode:geode-core