5 matches found
Malicious code in @amber-team/webpack-config (npm)
The package @amber-team/webpack-config was found to contain malicious code...
Malicious code in epic-fortnite-webpack-config (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in hw-webpack-config (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2020-29041
A misconfiguration in Web-Sesame 2020.1.1.3375 allows an unauthenticated attacker to download the source code of the application, facilitating its comprehension code review. Specifically, JavaScript source maps were inadvertently included in the production Webpack configuration. These maps contai...
CVE-2020-29041
The CVE-2020-29041 entry describes a misconfiguration in Web-Sesame 2020.1.1.3375 where JavaScript source maps were included in production Webpack config, allowing an unauthenticated attacker to download the application’s source code and related artifacts (bundle sources, configuration settings s...