Lucene search
GoogleOSV:MAL-2023-1343HistoryMay 01, 2023 - 11:42 p.m.
Malicious code in webpack-dev-server.legacy (npm)
2023-05-0123:42:55
Google
osv.dev
3
webpack-dev-server
malicious activity
npm
7.1 High
AI Score
Confidence
High
-= Per source details. Do not edit below this line.=-
Source: ossf-package-analysis (85cd0dbb01e0045658eb423c4580a09f07f36ce5af1689227f99e72348cda4a6)
The OpenSSF Package Analysis project identified ‘webpack-dev-server.legacy’ @ 1.0.0 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
| CPE | Name | Operator | Version |
|---|---|---|---|
| webpack-dev-server.legacy | eq | 1.0.0 |
7.1 High
AI Score
Confidence
High