Malicious Code Detected in airbnb-blueimp-file-upload: Version 96.8.0 Compromised
Summary
MAL-2025-190601: Malicious code in airbnb-blueimp-file-upload (npm). Affects airbnb-blueimp-file-upload versions 96.8.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 'airbnb-blueimp-file-upload' package is a popular npm library used for file uploads in web applications. It provides a simple interface for handling file uploads, supporting various file types and sizes. However, version 96.8.0 has been flagged for malicious activity, raising concerns about its security and the integrity of applications that rely on it.
Vulnerability Detail
The vulnerability originates from the package communicating with a domain associated with malicious activity. This could potentially lead to data breaches, unauthorized access, or other security incidents, as the package may be designed to exfiltrate sensitive information or compromise the host application.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall airbnb-blueimp-file-uploadIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can remove the affected package from your project and replace it with an alternative file upload library that has a good security track record. Ensure to thoroughly test your application after making any changes.
Conclusion
The 'airbnb-blueimp-file-upload' package version 96.8.0 has been identified as malicious, posing significant security risks to applications that utilize it. It is crucial for developers to update to a secure version and consider using alternative libraries to ensure the safety of their applications.
See every vulnerability recorded for airbnb-blueimp-file-upload →
FAQ
The package has been reported to communicate with a domain linked to malicious activities, which could compromise user data and application security.
You can use Vulert, a tool that monitors and alerts for open-source vulnerabilities in your software. By analyzing your package-lock.json file, Vulert can help you identify if your application is at risk.
Yes, you can temporarily remove the affected package and use an alternative library for file uploads until you can safely update to a secure version.
If immediate updates are not possible, ensure to monitor your application closely for any unusual activity and consider implementing additional security measures.
Detailed information about this vulnerability can be found in the OpenSSF Package Analysis report and on the GitHub repository for malicious packages.
