MTN Group: Developer Mistake

Check this path https://mtn.cm/components/ Impact Admin Mistake...

Malicious Typo-Squatting

crossenv is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...