Description
gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/498
Related Vulnerabilities
CVE-2023-44487 Vulnerability in maven package org.apache.tomcat:tomcat-coyote
CVE-2020-2228 Vulnerability in maven package org.jenkins-ci.plugins:gitlab-oauth
CVE-2020-2198 Vulnerability in maven package hudson.plugins:project-inheritance
CVE-2017-16066 Vulnerability in npm package opencv.js
CVE-2018-20677 Vulnerability in maven package org.fujion.webjars:bootstrap