Critical Malicious Code Vulnerability in blinqio-executions-cli Package
Summary
MAL-2025-191076: Malicious code in blinqio-executions-cli (npm). Affects blinqio-executions-cli versions 1.0.41. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The blinqio-executions-cli package is an npm tool designed for executing various tasks related to the blinqio platform. It is commonly used in JavaScript applications to facilitate automated processes. However, this package has been identified to contain malicious code that compromises the security of any system it is installed on, making it a significant risk for developers and organizations relying on it.
Vulnerability Detail
The vulnerability originates from the presence of embedded malicious code within the blinqio-executions-cli package. This code can grant unauthorized access to the system, allowing external entities to control the affected computer. The ramifications include potential data breaches, loss of sensitive information, and the need for immediate rotation of all secrets and keys stored on the compromised system. Users are advised that simply removing the package may not eliminate all traces of the malicious software.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall blinqio-executions-cliIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, it is recommended to isolate the affected system from the network and perform a thorough security audit to identify any additional malicious software that may have been installed. Additionally, consider using alternative packages that do not pose a security risk.
Conclusion
The blinqio-executions-cli package contains critical malicious code that poses a severe risk to any system it is installed on. Immediate action is required to remove the package and secure any exposed secrets. Utilizing tools like Vulert can help monitor and identify vulnerabilities in your applications.
See every vulnerability recorded for blinqio-executions-cli →
FAQ
The blinqio-executions-cli package is an npm tool used for executing tasks related to the blinqio platform, often utilized in JavaScript applications.
The malicious code can grant unauthorized access to your system, potentially leading to data breaches and loss of sensitive information.
You should remove the blinqio-executions-cli package immediately and rotate any secrets or keys stored on the affected system.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check your application using the Vulert playground without any signup.
Not necessarily. While removing the package is essential, there is no guarantee that all malicious software will be removed, and a thorough security audit is recommended.
