CVE-2017-16064

CVE-2017-16064 describes a malicious module named "node-openssl" that was published on npm with the intent to hijack environment variables. This vulnerability affects the "node-openssl_project node-openssl" product. It carries a high CVSS score of 7.5, indicating a network-based attack with low complexity and a high impact on confidentiality, but no impact on integrity or availability. While the module has been unpublished, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion beyond a single mention.