CWE-506

Embedded Malicious Code

ClassIncomplete

Description

The product contains code that appears to be malicious in nature.

Malicious flaws have acquired colorful names, including Trojan horse, trapdoor, timebomb, and logic-bomb. A developer might insert malicious code with the intent to subvert the security of a product or its host system at some time in the future. It generally refers to a program that performs a useful service but exploits rights of the program's user in a way the user does not intend.

Hierarchy (View 1000)

Parents

CWE-912

Children

Related attack patterns (CAPEC)

CAPEC-442 · CAPEC-448 · CAPEC-636

CVEs mapped to this weakness (103)

page 4 of 6

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-16078	Shadowsock Project Shadowsock	Hig	0.49	7.5	0.01	Jun 7, 2018	shadowsock was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16077	Mongose Project Mongose	Hig	0.49	7.5	0.01	Jun 7, 2018	mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16076	Proxy.js Project Proxy.js	Hig	0.49	7.5	0.01	Jun 7, 2018	proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16075	HTTP Proxy.js Project HTTP Proxy.js	Hig	0.49	7.5	0.01	Jun 7, 2018	http-proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16074	Crossenv Project Crossenv	Hig	0.49	7.5	0.01	Jun 7, 2018	crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16073	Noderequest Project Noderequest	Hig	0.49	7.5	0.01	Jun 7, 2018	noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16072	Nodemailer.js Project Nodemailer.js	Hig	0.49	7.5	0.01	Jun 7, 2018	nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16071	Nodemailer Js Project Nodemailer Js	Hig	0.49	7.5	0.01	Jun 7, 2018	nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16070	Nodecaffe Project Nodecaffe	Hig	0.49	7.5	0.01	Jun 7, 2018	nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16069	Nodeffmpeg Project Nodeffmpeg	Hig	0.49	7.5	0.01	Jun 7, 2018	nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16068	Ffmepg Project Ffmepg	Hig	0.49	7.5	0.01	Jun 7, 2018	ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16067	Node Opencv Project Node Opencv	Hig	0.49	7.5	0.01	Jun 7, 2018	node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16066	Opencv.js Project Opencv.js	Hig	0.49	7.5	0.01	Jun 7, 2018	opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16065	Openssl.js Project Openssl.js	Hig	0.49	7.5	0.01	Jun 7, 2018	openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16064	Node Openssl Project Node Openssl	Hig	0.49	7.5	0.01	Jun 7, 2018	node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16063	Node Opensl Project Node Opensl	Hig	0.49	7.5	0.01	Jun 7, 2018	node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16060	Babelcli Project Babelcli	Hig	0.49	7.5	0.01	Jun 7, 2018	babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16059	Mssql Node Project Mssql Node	Hig	0.49	7.5	0.01	Jun 7, 2018	mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16058	Gruntcli Project Gruntcli	Hig	0.49	7.5	0.01	Jun 7, 2018	gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16057	Nodemssql Project Nodemssql	Hig	0.49	7.5	0.01	Jun 7, 2018	nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

CVE-2017-16078HigJun 7, 2018
Shadowsock Project
Shadowsock
risk 0.49cvss 7.5epss 0.01
shadowsock was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16077HigJun 7, 2018
Mongose Project
Mongose
risk 0.49cvss 7.5epss 0.01
mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16076HigJun 7, 2018
Proxy.js Project
Proxy.js
risk 0.49cvss 7.5epss 0.01
proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16075HigJun 7, 2018
HTTP Proxy.js Project
HTTP Proxy.js
risk 0.49cvss 7.5epss 0.01
http-proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16074HigJun 7, 2018
Crossenv Project
Crossenv
risk 0.49cvss 7.5epss 0.01
crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16073HigJun 7, 2018
Noderequest Project
Noderequest
risk 0.49cvss 7.5epss 0.01
noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16072HigJun 7, 2018
Nodemailer.js Project
Nodemailer.js
risk 0.49cvss 7.5epss 0.01
nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16071HigJun 7, 2018
Nodemailer Js Project
Nodemailer Js
risk 0.49cvss 7.5epss 0.01
nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16070HigJun 7, 2018
Nodecaffe Project
Nodecaffe
risk 0.49cvss 7.5epss 0.01
nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16069HigJun 7, 2018
Nodeffmpeg Project
Nodeffmpeg
risk 0.49cvss 7.5epss 0.01
nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16068HigJun 7, 2018
Ffmepg Project
Ffmepg
risk 0.49cvss 7.5epss 0.01
ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16067HigJun 7, 2018
Node Opencv Project
Node Opencv
risk 0.49cvss 7.5epss 0.01
node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16066HigJun 7, 2018
Opencv.js Project
Opencv.js
risk 0.49cvss 7.5epss 0.01
opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16065HigJun 7, 2018
Openssl.js Project
Openssl.js
risk 0.49cvss 7.5epss 0.01
openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16064HigJun 7, 2018
Node Openssl Project
Node Openssl
risk 0.49cvss 7.5epss 0.01
node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16063HigJun 7, 2018
Node Opensl Project
Node Opensl
risk 0.49cvss 7.5epss 0.01
node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16060HigJun 7, 2018
Babelcli Project
Babelcli
risk 0.49cvss 7.5epss 0.01
babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16059HigJun 7, 2018
Mssql Node Project
Mssql Node
risk 0.49cvss 7.5epss 0.01
mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16058HigJun 7, 2018
Gruntcli Project
Gruntcli
risk 0.49cvss 7.5epss 0.01
gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16057HigJun 7, 2018
Nodemssql Project
Nodemssql
risk 0.49cvss 7.5epss 0.01
nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.