Tag

cross-env-npm

Safeguard articles tagged "cross-env-npm" — guides, analysis, and best practices for software supply chain and application security.

1 article

Supply Chain

cross-env and the crossenv Typosquat: A Supply Chain Case Study

In 2017, a malicious crossenv package on npm stole environment variables from developers who mistyped cross-env. The incident is still the cleanest case study in typosquatting we have.

Jan 28, 20257 min read