676 matches found
MAL-2025-22753 Malicious code in html-webpack-plugin-panspermia-local-tachyon (npm)
The package html-webpack-plugin-panspermia-local-tachyon was found to contain malicious code...
MAL-2025-19737 Malicious code in equinox-child-process-html-webpack-plugin-frontend (npm)
The package equinox-child-process-html-webpack-plugin-frontend was found to contain malicious code...
MAL-2025-34760 Malicious code in terser-webpack-plugin-nebula-fetch-umbriel (npm)
The package terser-webpack-plugin-nebula-fetch-umbriel was found to contain malicious code...
MAL-2025-24889 Malicious code in lacerta-eris-altair-terser-webpack-plugin (npm)
The package lacerta-eris-altair-terser-webpack-plugin was found to contain malicious code...
MAL-2025-34757 Malicious code in terser-webpack-plugin-brane-prettier-style-loader (npm)
The package terser-webpack-plugin-brane-prettier-style-loader was found to contain malicious code...
MAL-2025-18171 Malicious code in dedupe-chunks-webpack-plugin (npm)
The package dedupe-chunks-webpack-plugin was found to contain malicious code...
MAL-2025-25205 Malicious code in levels-optimize-css-assets-webpack-plugin-hermes-callisto (npm)
The package levels-optimize-css-assets-webpack-plugin-hermes-callisto was found to contain malicious code...
Malicious code in speleology-puppeteer-optimize-css-assets-webpack-plugin-prettier-plugin-markdown (npm)
The package speleology-puppeteer-optimize-css-assets-webpack-plugin-prettier-plugin-markdown was found to contain malicious code...
MAL-2025-27880 Malicious code in nucleosynthesis-halley-optimize-css-assets-webpack-plugin-nebula (npm)
The package nucleosynthesis-halley-optimize-css-assets-webpack-plugin-nebula was found to contain malicious code...
Malicious code in lacerta-eris-altair-terser-webpack-plugin (npm)
The package lacerta-eris-altair-terser-webpack-plugin was found to contain malicious code...
Malware in html-webpack-plugin-v5
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in html-webpack-plugin-v4
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in html-webpack-plugin-v4 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 660341362f6329de70cdccedcc76ff3841c456fce84ac128ed9db104838ca1af Any computer that has this package installed or running should be considered...
Malicious code in html-webpack-plugin-v5 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed88e44f9e2966208907dcc8fd1b170e683aa017e8a706289a5bd2134e60f37 Any computer that has this package installed or running should be considered...
MAL-2025-1038 Malicious code in html-webpack-plugin-v4 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 660341362f6329de70cdccedcc76ff3841c456fce84ac128ed9db104838ca1af Any computer that has this package installed or running should be considered...
MAL-2025-1039 Malicious code in html-webpack-plugin-v5 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed88e44f9e2966208907dcc8fd1b170e683aa017e8a706289a5bd2134e60f37 Any computer that has this package installed or running should be considered...
Malicious code in webpack-extensive-lodash-replacement-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 845800d2390e86cf58dcd05fd029a2ff2a064fef8ec1bc60b2ad041467db4fdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in webpack-inline-constant-exports-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb8ae870fad74826ac57af33f27bdbe9e74f667ec62aac01b5c9e55a47d36001 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...