description: The module npm-script-demo opened a connection to a command and control server. It has been removed from the npm registry.
problem types: Embedded Malicious Code (CWE-506)
affected:
{
product: npm-script-demo node module
vendor: HackerOne
versions:
status: affected, version: All versions
}