crossenv is malware

🗓️ 29 Aug 2018 23:05:46Reported by GitHub Advisory DatabaseType

The 'crossenv' package is malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. If found, delete the package, clear npm cache, ensure it's not in other package.json files, regenerate registry credentials, tokens, and sensitive credentials. Review exposed services for compromise.

Reporter	Title	Published	Views	Family All 11
CNVD	Unspecified vulnerability in crossenv	13 Jun 201800:00	–	cnvd
CVE	CVE-2017-16074	7 Jun 201802:00	–	cve
Cvelist	CVE-2017-16074	7 Jun 201802:00	–	cvelist
EUVD	EUVD-2018-0389	7 Oct 202500:30	–	euvd
Node.js	Hijacked Environment Variables	8 Aug 201723:46	–	nodejs
NVD	CVE-2017-16074	7 Jun 201802:29	–	nvd
OpenVAS	Malicious JavaScript Package Detection	12 Jun 201800:00	–	openvas
OSV	GHSA-C2M4-W5HM-VQJW crossenv is malware	29 Aug 201823:05	–	osv
Prion	Code injection	7 Jun 201802:29	–	prion
Veracode	Malicious Typo-Squatting	7 Jun 201806:38	–	veracode