MAL-2025-39034 Malicious code in webpack-sever-render-middleware (npm)

The package webpack-sever-render-middleware was found to contain malicious code...

MAL-2025-15506 Malicious code in basic-webpack-project (npm)

The package basic-webpack-project was found to contain malicious code...

Malicious code in @angular_devkit/build-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 053dbd5b72c824b5644482986fcc9a5caca48fcbe447f90f957e420418f2bcb4 The OpenSSF Package Analysis project identified '@angulardevkit/build-webpack' @ 99.1.1 npm as malicious. It is considered malicious because: -...

MAL-2025-6629 Malicious code in webpack-dev-server (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in webpack-dev-server (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in epic-fortnite-webpack-config (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6718 Malicious code in epic-fortnite-webpack-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious Package

Overview webpack-server-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in webpack-server-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4670ee3b5e87d1f4c57be17f95c864d3412ab82f6f6388c35cacf173fce117c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6382 Malicious code in webpack-server-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4670ee3b5e87d1f4c57be17f95c864d3412ab82f6f6388c35cacf173fce117c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in webpack-server-config

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview react-server-dom-webpack-experimental is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malware in react-server-dom-webpack-experimental

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-6200 Malicious code in simple-line-icons-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5bf593593545cc9181f1cc4b8f5832bc438fe436a6181cc341cc59645a558c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in simple-line-icons-webpack

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in simple-line-icons-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5bf593593545cc9181f1cc4b8f5832bc438fe436a6181cc341cc59645a558c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-browser-webpack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d8417c8eb33f6d78a0b4c28cf081096fc75806bc0795e4327cc6792414ee266 The OpenSSF Package Analysis project identified 'ts-browser-webpack' ...

MAL-2025-6132 Malicious code in ts-browser-webpack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d8417c8eb33f6d78a0b4c28cf081096fc75806bc0795e4327cc6792414ee266 The OpenSSF Package Analysis project identified 'ts-browser-webpack' ...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to to prototype pollution due to webpack loader-utils ( CVE-2022-37601 )

Summary Potential vulnerabilities in webpack loader-utils module has been identified that may affect IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2022-37601 DESCRIPTION: Prototype pollution vulnerability in function parseQuery in parseQuery....

Malware in minimal-ts-webpack

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...