9 matches found
GHSA-C2M4-W5HM-VQJW crossenv is malware
The crossenv package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...
Unspecified vulnerability in crossenv
crossenv is a module for setting and using environment variables that supports several platforms. A security vulnerability exists in crossenv. An attacker can exploit this vulnerability to steal environment variables...
Malicious JavaScript Package Detection
Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
CVE-2017-16074
crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
Code injection
crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16074
crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16074
The CVE-2017-16074 entry concerns the npm package crossenv, which is described in connected documents as malware that hijacks environment variables and exfiltrates them to attacker-controlled locations. All versions have been unpublished from npm. Public advisories (GitHub GHSA and npm advisory) ...
PT-2018-6102
Name of the Vulnerable Software and Affected Versions: crossenv versions all Description: The crossenv package is a piece of malware designed to steal environment variables and send them to attacker-controlled locations. All versions of the package have been unpublished from the npm registry. If...
