Malicious Code Detected in @modals/layout Package - Critical Vulnerability Alert
Summary
MAL-2026-2019: Malicious code in @modals/layout (npm). Affects @modals/layout versions 99999.0.0 – 99999.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The @modals/layout package is a component of the npm ecosystem, designed for layout management in web applications. It is utilized for creating modal interfaces, enhancing user experience by providing interactive elements. However, the package has been flagged for malicious behavior, raising concerns about its integrity and security.
Vulnerability Detail
The vulnerability in the @modals/layout package stems from its version 99999.0.0, which has been identified as malicious by the OpenSSF Package Analysis project. This package communicates with a domain linked to malicious activities and executes commands that can compromise the security of applications using it. The ramifications include unauthorized access, data breaches, and potential exploitation of the affected systems.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall @modals/layoutIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can remove the @modals/layout package from your project until a secure version is released. You can do this by running the following command: npm uninstall @modals/layout.
Conclusion
The @modals/layout package has been identified as malicious, posing significant security risks to applications that utilize it. It is crucial to update or remove the package to mitigate potential threats. Regular monitoring of dependencies is recommended to maintain application security.
See every vulnerability recorded for @modals/layout →
FAQ
The package communicates with a domain associated with malicious activities and executes commands that can compromise application security.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without requiring any signup.
If immediate updates are not possible, consider removing the package from your project as a temporary measure until a secure version is available.
While specific exploits have not been detailed, the potential for unauthorized access and data breaches exists due to the malicious nature of the package.
Utilize tools like Vulert, which can monitor your package-lock.json for vulnerabilities and provide real-time alerts.
