Malicious code in deneb-version-terser-webpack-plugin-lyra (npm)

The package deneb-version-terser-webpack-plugin-lyra was found to contain malicious code...

Malicious code in draco-optimize-css-assets-webpack-plugin-proxima-nconf (npm)

The package draco-optimize-css-assets-webpack-plugin-proxima-nconf was found to contain malicious code...

Malicious code in luna-blaze-development-terser-webpack-plugin (npm)

The package luna-blaze-development-terser-webpack-plugin was found to contain malicious code...

MAL-2025-25663 Malicious code in luna-blaze-development-terser-webpack-plugin (npm)

The package luna-blaze-development-terser-webpack-plugin was found to contain malicious code...

Malware in html-webpack-plugin-v4

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in html-webpack-plugin-v5

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-1038 Malicious code in html-webpack-plugin-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 660341362f6329de70cdccedcc76ff3841c456fce84ac128ed9db104838ca1af Any computer that has this package installed or running should be considered...

MAL-2025-1039 Malicious code in html-webpack-plugin-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed88e44f9e2966208907dcc8fd1b170e683aa017e8a706289a5bd2134e60f37 Any computer that has this package installed or running should be considered...

Malicious code in html-webpack-plugin-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 660341362f6329de70cdccedcc76ff3841c456fce84ac128ed9db104838ca1af Any computer that has this package installed or running should be considered...

Malicious code in html-webpack-plugin-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed88e44f9e2966208907dcc8fd1b170e683aa017e8a706289a5bd2134e60f37 Any computer that has this package installed or running should be considered...

Malicious code in webpack-extensive-lodash-replacement-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 845800d2390e86cf58dcd05fd029a2ff2a064fef8ec1bc60b2ad041467db4fdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-inline-constant-exports-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb8ae870fad74826ac57af33f27bdbe9e74f667ec62aac01b5c9e55a47d36001 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11408 Malicious code in nodes-polyfill-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in nodes-polyfill-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=-...

Critters cross-site scripting vulnerabilities

Critters is a GoogleChromeLabs open source Webpack plugin . Used to inline critical CSS and delay loading the rest. A security vulnerability exists in Critters versions 0.0.17-0.0.19. An attacker exploited the vulnerability to perform cross-site scripting attacks...

7niu-webpack-plugin (0.1.0), @a-brands/backend (>=1.0.0, <=1.0.4) +1164 more potentially affected by CVE-2020-26302 via is_js (>=0.2.1, <=0.9.0)

isjs NPM version =0.2.1, =1.0.0, =0.4.0-alpha.1, =0.1.0-beta.15, =0.3.0-beta.18, =0.1.0-alpha.10cbdf05, =1.0.1, =0.1.0, =1.0.5, =1.0.0, =3.10.1, =3.13.2 and more Source cves: CVE-2020-26302 Source advisory: OSV:GHSA-PVRW-G6FX-MCX2...

Malicious Package

Overview copy-webpack-plugin-v6 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

MAL-2022-6741 Malicious code in ug-lifjjs-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e581f845ff82ba5bc69671074334830a97a5a7b9a97f2e322f8fea230e11681 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ug-lifjjs-webpack-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ug-lifjjs-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e581f845ff82ba5bc69671074334830a97a5a7b9a97f2e322f8fea230e11681 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...