Description
crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Remediation
References
https://nodesecurity.io/advisories/513
Related Vulnerabilities
CVE-2022-45392 Vulnerability in maven package io.jenkins.plugins:cavisson-ns-nd-integration
CVE-2023-26049 Vulnerability in maven package org.eclipse.jetty:jetty-server
CVE-2020-26302 Vulnerability in maven package org.webjars.npm:is_js
CVE-2017-7677 Vulnerability in maven package org.apache.ranger:ranger-hive-utils
CVE-2021-20323 Vulnerability in maven package org.keycloak:keycloak-core