CVE-2017-16044CWE-506

`d3.js` was a malicious module published with the intent to hijack environment variables

published June 4, 2018

CVSS
—
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

`d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01452 · 73.0th percentile
Weakness
CWE-506 · Embedded Malicious Code
Published
2018-06-04T19:00Z
EPSS history
Timeline
  • 04 JUN 19:00Z
    `d3.js` was a malicious module published with the intent to hijack environment variables
    cvelistv5