Critters 跨站脚本漏洞

Critters is a GoogleChromeLabs open source Webpack plugin . Used to inline critical CSS and delay loading the rest. A security vulnerability exists in Critters versions 0.0.17-0.0.19. An attacker exploited the vulnerability to perform cross-site scripting attacks...

Malicious Package

Overview copy-webpack-plugin-v6 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in ug-lifjjs-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e581f845ff82ba5bc69671074334830a97a5a7b9a97f2e322f8fea230e11681 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6741 Malicious code in ug-lifjjs-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e581f845ff82ba5bc69671074334830a97a5a7b9a97f2e322f8fea230e11681 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5475 Malicious code in progressbr-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43615dd79938c73f8d450d54000bb3168c08f0f78d1110e17e53fb4933ee0c3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fork-ts-checker-webpack-lugin-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab6c3138834084628633efb364c3a3cca38b47891a4b52a61499b82b25f6a20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shared-library-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc75dde7f09ece6b14dd7e91131013f1af31223f238d015382c497ea79107ccc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6079 Malicious code in shared-library-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc75dde7f09ece6b14dd7e91131013f1af31223f238d015382c497ea79107ccc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bugbounty-automation/deps-json-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cc3cb3b06f569513ecf3acdd6f2dde149853d34f3ea68ada80288bfb074e9b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-157 Malicious code in @bugbounty-automation/deps-json-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cc3cb3b06f569513ecf3acdd6f2dde149853d34f3ea68ada80288bfb074e9b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2444 Malicious code in deps-json-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f503791c8f572fb50134eb9d7bb40c61cc0a42fdb6c4e9a389396c1b072f25e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deps-json-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f503791c8f572fb50134eb9d7bb40c61cc0a42fdb6c4e9a389396c1b072f25e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bynder-private/persistgraphql-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb7a1f4b894f482ef5d06c40efcd097c36c9c2cb32afc8ff27a71ec7787de6fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-160 Malicious code in @bynder-private/persistgraphql-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb7a1f4b894f482ef5d06c40efcd097c36c9c2cb32afc8ff27a71ec7787de6fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@abdullah2993/web-ext-webpack-plugin (>=1.1.0, <=1.1.1), @bgpat/webext-webpack-plugin (0.1.4) +20 more potentially affected by CVE-2020-7789 via node-notifier (>=8.0.0, <=8.0.1)

node-notifier NPM version =8.0.0, =1.1.0, =2.3.0, =15.0.0, =0.1.19-a2, =0.5.17-a10, =2.4.0, =0.0.38, =4.2.0, =0.0.2, =0.0.18 and more Source cves: CVE-2020-7789 Source advisory: SNYK:JS-NODENOTIFIER-1035794...

Command Injection

Amendment This was deemed not a vulnerability. Overview git-revision-webpack-plugin is a simple webpack plugin that generates version and commithash files during build based on a local git repository. Affected versions of this package are vulnerable to Command Injection. The function commithash...