Malicious Package

Overview jinghuan-jsb is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

jinghuan-cli (>=1.0.20, <=1.0.41), jinghuanjs (>=1.0.73, <=1.0.93) potentially affected by unknown CVE via jinghuan-jsb (1.0.16)

jinghuan-jsb NPM version 1.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on jinghuan-jsb and may be impacted: - jinghuan-cli =1.0.20, =1.0.73, =1.0.93 Source cves: unknown CVE Source advisory: SNYK:JS-JINGHUANJSB-2962984...