CVE-2017-16062

CVE-2017-16062 describes a malicious node-tkinter module designed to hijack environment variables, affecting the node-tkinter_project. This vulnerability carries a high severity CVSS score of 7.5, indicating a network-based attack with low complexity that could lead to high confidentiality impact without user interaction. While the module has been unpublished and there is no evidence of active exploitation, public exploit code, or significant community discussion, its nature as a supply chain attack highlights a critical risk.