MAL-2023-1343

    Dashboard / Malicious Package / MAL-2023-1343

    MAL-2023-1343

    Published: 1 May 2023Last Modified: 28 Jun 2024Aliases: 
    SNYK-JS-WEBPACKDEVSERVERLEGACY-3336043

    Summary: Malicious code in webpack-dev-server.legacy (npm)

    Details: Source: ossf-package-analysis (85cd0dbb01e0045658eb423c4580a09f07f36ce5af1689227f99e72348cda4a6) The OpenSSF Package Analysis project identified 'webpack-dev-server.legacy' @ 1.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References: https://security.snyk.io/vuln/SNYK-JS-WEBPACKDEVSERVERLEGACY-3336043

    Affected packages

    Package

    Name: webpack-dev-server.legacy

    Purl: pkg:npm/webpack-dev-server.legacy

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    MAL-2023-1343 | CVE-DB