Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2017-16081

cross-env.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16081

CVE-2017-16081 corresponds to the cross-env.js malware incident. The affected component is the cross-env.js package, published with malicious intent to hijack environment variables. The npm registry has unpublished all versions, and multiple sources (GitHub advisory GHSA-hwhq-3hrj-v6v5, NVD entry...