1955 matches found
MAL-2025-44376 Malicious code in ganymede-webpack-triton-castor (npm)
The package ganymede-webpack-triton-castor was found to contain malicious code...
MAL-2025-45299 Malicious code in neutrino-paleontology-html-webpack-plugin-mui (npm)
The package neutrino-paleontology-html-webpack-plugin-mui was found to contain malicious code...
MAL-2025-45561 Malicious code in pino-pretty-carpo-css-minimizer-webpack-plugin-mini-css-extract-plugin (npm)
The package pino-pretty-carpo-css-minimizer-webpack-plugin-mini-css-extract-plugin was found to contain malicious code...
MAL-2025-43788 Malicious code in chromedriver-css-minimizer-webpack-plugin-petrology-on (npm)
The package chromedriver-css-minimizer-webpack-plugin-petrology-on was found to contain malicious code...
MAL-2025-46480 Malicious code in ursa-phoenix-hadron-terser-webpack-plugin (npm)
The package ursa-phoenix-hadron-terser-webpack-plugin was found to contain malicious code...
MAL-2025-46753 Malicious code in yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin (npm)
The package yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin was found to contain malicious code...
MAL-2025-46154 Malicious code in style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin (npm)
The package style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin was found to contain malicious code...
MAL-2025-46256 Malicious code in terser-webpack-plugin-socketio-vuetify-stream (npm)
The package terser-webpack-plugin-socketio-vuetify-stream was found to contain malicious code...
MAL-2025-45201 Malicious code in miranda-css-minimizer-webpack-plugin-ursa-request (npm)
The package miranda-css-minimizer-webpack-plugin-ursa-request was found to contain malicious code...
Malicious code in spark-webpack-react-app (npm)
The package spark-webpack-react-app was found to contain malicious code...
MAL-2025-46117 Malicious code in spark-webpack-react-app (npm)
The package spark-webpack-react-app was found to contain malicious code...
webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser
...
webpack-dev-server users' source code may be stolen when they access a malicious web site
...
Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.
...
A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.
...
webpack-dev-middleware Path Traversal vulnerability
...
MAL-2025-41257 Malicious code in @uit-spritesmith/webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 26ec1ae1c565770377c72c56c41c0a0ec1387c318225b2c8b2db2c255c96839c The OpenSSF Package Analysis project identified '@uit-spritesmith/webpack' @ 0.1.3 npm as malicious. It is considered malicious because: - The...
Linux Distros Unpatched Vulnerability : CVE-2022-37603
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable...
Linux Distros Unpatched Vulnerability : CVE-2023-28154
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a propert...