CVE-2017-16126: Botbait Project Botbait

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked (test, require, pre-install)

Affected products

• Botbait Project Botbait: up to and including 2.0.0

Published 2018-06-07. Last modified 2026-06-17.