CVE-2017-16062CWE-506

node-tkinter was a malicious module published with the intent to hijack environment variables

published May 29, 2018

CVSS
—
EPSS
1%
Percentile
64.3
In the wild
Unconfirmed
What it is

node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01066 · 64.3th percentile
Weakness
CWE-506 · Embedded Malicious Code
Published
2018-05-29T20:00Z
EPSS history
Timeline
  • 29 MAY 20:00Z
    node-tkinter was a malicious module published with the intent to hijack environment variables
    cvelistv5