Description
node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/506
Related Vulnerabilities
CVE-2018-19586 Vulnerability in maven package org.silverpeas.core:silverpeas-core-web
CVE-2021-41189 Vulnerability in maven package org.dspace:dspace-api
CVE-2018-16330 Vulnerability in maven package org.webjars.npm:editor.md
CVE-2019-10803 Vulnerability in npm package push-dir
CVE-2022-25898 Vulnerability in maven package org.webjars.bowergithub.kjur:jsrsasign