You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Path to dependency file: /fixtures/packaging/webpack/dev/package.json
Path to vulnerable library: /fixtures/packaging/webpack/dev/package.json,/fixtures/dom/package.json,/fixtures/packaging/webpack/prod/package.json,/fixtures/packaging/webpack-alias/dev/package.json,/fixtures/expiration/package.json,/fixtures/attribute-behavior/package.json,/fixtures/packaging/brunch/dev/package.json,/fixtures/packaging/webpack-alias/prod/package.json,/fixtures/packaging/brunch/prod/package.json
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running (user's machine or backend server). The following risks were identified: Malware dropper – this package contains a Trojan horse, allowing the unauthorized installation of other potentially malicious software.
MSC-2023-16606 - Critical Severity Vulnerability
Native Access to Mac OS-X FSEvents
Library home page: https://registry.npmjs.org/fsevents/-/fsevents-1.1.2.tgz
Path to dependency file: /fixtures/packaging/webpack/dev/package.json
Path to vulnerable library: /fixtures/packaging/webpack/dev/package.json,/fixtures/dom/package.json,/fixtures/packaging/webpack/prod/package.json,/fixtures/packaging/webpack-alias/dev/package.json,/fixtures/expiration/package.json,/fixtures/attribute-behavior/package.json,/fixtures/packaging/brunch/dev/package.json,/fixtures/packaging/webpack-alias/prod/package.json,/fixtures/packaging/brunch/prod/package.json
Dependency Hierarchy:
Found in HEAD commit: 4669645897ed4ebcd4ee037f4dabb509ed4754c7
Found in base branch: master
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running (user's machine or backend server). The following risks were identified: Malware dropper – this package contains a Trojan horse, allowing the unauthorized installation of other potentially malicious software.
Publish Date: 2023-09-20
URL: MSC-2023-16606
Base Score Metrics:
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: