Description
`d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
Related Vulnerabilities
Envoy Proxy CVE-2019-18802 Vulnerability (CVE-2019-18802)
WordPress Plugin FL3R FeelBox Multiple Vulnerabilities (8.1)
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43941)
WordPress Plugin Spectra-WordPress Gutenberg Blocks Cross-Site Scripting (1.14.11)
WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler PHP Object Injection (5.0.0)