CTO of npm, Inc. On the Internet longer than many techbros have been alive. Big fan of turning this fact into cups of coffee.
On August 1, a user notified us via Twitter that a package with a name very similar to the popular cross-env package was sending environment variables from its installation context out to npm.hacktask.net. We investigated this report immediately and took action…
cross-env