CVE-2017-16081

CVE-2017-16081 corresponds to the cross-env.js malware incident. The affected component is the cross-env.js package, published with malicious intent to hijack environment variables. The npm registry has unpublished all versions, and multiple sources (GitHub advisory GHSA-hwhq-3hrj-v6v5, NVD entry...