Supply Chain Attack Hits Rspack, Vant npm Packages with Monero Miner

Popular npm packages, Rspack and Vant, were recently compromised with malicious code. Learn about the attack, the impact, and how to protect your projects from similar threats...

Malicious code in rspack-tests-tools (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11442 Malicious code in rspack-tests-tools (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11441 Malicious code in rspack-test-tool (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in rspack-test-tool (npm)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: IBM Event Processing susceptible improper validation

Summary IBM Event Processing vulnerable to cross-site scripting, caused by improper validation CVE-2024-43788 Vulnerability Details CVEID:CVE-2024-43788 DESCRIPTION: Webpack and Rspack are vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote...

@albumjs/album (>=0.1.0 <=0.2.1), @albumjs/cli (>=0.1.0 <=0.2.3) +220 more potentially affected by unknown CVE via @rspack/core (>=0.0.0-a37ce9d-20230210040019 <=1.0.0-rc.0)

@rspack/core NPM version =0.0.0-a37ce9d-20230210040019, =0.1.0, =0.1.0, =0.1.0, =9.3.0, =1.1.1, =1.1.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-84JW-G43V-8GJM...

GHSA-84JW-G43V-8GJM DOM Clobbering Gadget found in Rspack's AutoPublicPathRuntimeModule that leads to XSS

Hi, Rspack|Webpack developer team! Summary We discovered a DOM Clobbering vulnerability in Webpack’s AutoPublicPathRuntimeModule. The DOM Clobbering gadget in the module can lead to cross-site scripting XSS in web pages where scriptless attacker-controlled HTML elements e.g., an img tag with an...