MAL-2025-49219
See a problem?- Import Source
- https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/epic-webpack-config/MAL-2025-49219.json
- JSON Data
- https://api.osv.dev/v1/vulns/MAL-2025-49219
- Published
- 2025-10-30T17:38:57Z
- Modified
- 2026-10-01T03:15:05Z
- Summary
- Malicious code in epic-webpack-config (npm)
- Details
-
-= Per source details. Do not edit below this line.=-
Source: amazon-inspector (5fa7e318158dc990d050f69f3aa76ec1637211eefb765d1f9db26661f69c3c70)
The package epic-webpack-config was found to contain malicious code.
- Database specific
{ "malicious-packages-origins": [ { "import_time": "2025-10-30T18:08:37.960581755Z", "modified_time": "2025-10-30T17:38:57Z", "ranges": [ { "events": [ { "introduced": "0" } ], "type": "SEMVER" } ], "sha256": "5fa7e318158dc990d050f69f3aa76ec1637211eefb765d1f9db26661f69c3c70", "source": "amazon-inspector" } ] }- Credits
-
-
- Amazon Inspector - FINDER
-
Affected packages
npm / epic-webpack-config
Package
- Name
- epic-webpack-config
- View open source insights on deps.dev
- Purl
- pkg:npm/epic-webpack-config
Affected versions
0.*
0.0.0
0.0.1-security
0.1.0
0.2.0
0.3.0
0.4.0
0.5.0
0.6.0
0.7.0
0.8.0
0.9.0
1.*
1.0.0
1.1.0
1.2.0
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
1.9.0
2.*
2.0.0
2.1.0
2.2.0
2.3.0
2.4.0
2.5.0
2.6.0
2.7.0
2.8.0
2.9.0
3.*
3.0.0
3.1.0
3.2.0
3.3.0
3.4.0
3.5.0
3.6.0
3.7.0
3.8.0
3.9.0
4.*
4.0.0
4.1.0
4.2.0
4.2.2
4.3.0
4.4.0
4.5.0
4.6.0
4.7.0
4.8.0
4.9.0
5.*
5.0.0
5.1.0
5.2.0
5.3.0
5.4.0
5.5.0
5.6.0
5.7.0
5.8.0
5.9.0
6.*
6.0.0
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.6.0
6.7.0
6.8.0
6.9.0
7.*
7.0.0
7.1.0
7.2.0
7.3.0
7.4.0
7.5.0
7.6.0
7.7.0
7.8.0
7.9.0
8.*
8.0.0
8.1.0
8.2.0
8.3.0
8.4.0
8.5.0
8.6.0
8.7.0
8.8.0
8.9.0
9.*
9.0.0
9.1.0
9.2.0
9.3.0
9.4.0
9.5.0
9.6.0
9.7.0
9.8.0
9.9.0
10.*
10.0.0
2100.*
2100.4.2