MAL-2023-1342

    Dashboard / Malicious Package / MAL-2023-1342

    MAL-2023-1342

    Published: 1 May 2023Last Modified: 28 Jun 2024Aliases: 
    SNYK-JS-WEBPACKCLILEGACY-3336028

    Summary: Malicious code in webpack-cli.legacy (npm)

    Details: Source: ossf-package-analysis (22737261df7f74819a3f3f968e6516db5e37f6621827d6148b290f7650b9992f) The OpenSSF Package Analysis project identified 'webpack-cli.legacy' @ 1.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References: https://security.snyk.io/vuln/SNYK-JS-WEBPACKCLILEGACY-3336028

    Affected packages

    Package

    Name: webpack-cli.legacy

    Purl: pkg:npm/webpack-cli.legacy

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    MAL-2023-1342 | CVE-DB