Description
gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/498
Related Vulnerabilities
CVE-2019-10412 Vulnerability in maven package com.inedo.proget:inedo-proget
CVE-2018-19056 Vulnerability in npm package editor.md
CVE-2016-10626 Vulnerability in npm package mystem3
CVE-2023-46496 Vulnerability in npm package @evershop/evershop
CVE-2021-28100 Vulnerability in maven package com.netflix.priam:priam