Critical Malicious Code Vulnerability in designstudiouiux Package
Summary
MAL-2025-190955: Malicious code in designstudiouiux (npm). Affects designstudiouiux versions 1.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The designstudiouiux package is an npm library designed for UI/UX design purposes. It provides various tools and components that facilitate the development of user interfaces. However, this package has been identified to contain malicious code, posing significant security risks to systems that utilize it.
Vulnerability Detail
The vulnerability originates from the inclusion of malicious code within the designstudiouiux package. This code can compromise any computer where the package is installed, potentially allowing unauthorized access to sensitive information such as secrets and keys. The malicious nature of the code has been confirmed by security assessments from Amazon Inspector and other sources, indicating that systems running this package should be considered fully compromised.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall designstudiouiuxIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users should uninstall the designstudiouiux package using the command: npm uninstall designstudiouiux. Additionally, monitor your system for any unusual activity and consider using security tools to scan for further malicious software.
Conclusion
The designstudiouiux package has been identified as containing malicious code, posing significant security risks. Immediate action is required to remove the package and secure any sensitive information. Users are encouraged to monitor their systems and consider using tools like Vulert for ongoing vulnerability management.
See every vulnerability recorded for designstudiouiux →
FAQ
The designstudiouiux package is an npm library used for UI/UX design, providing various components and tools for developers.
The malicious code can compromise your system, allowing unauthorized access to sensitive information and potentially leading to data breaches.
Immediately uninstall the designstudiouiux package and rotate any secrets or keys stored on the affected system.
Currently, there is no patched version available. Users should remove the package to mitigate risks.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time using just package-lock.json. You can check your application for vulnerabilities using the Vulert playground without signup.
