Critical Malicious Code Vulnerability in flip-prx Package
Summary
MAL-2026-321: Malicious code in flip-prx (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The flip-prx package is an npm library designed for proxying requests in JavaScript applications. It is commonly used to enhance the functionality of web applications by managing API requests and responses. However, this package has been identified as containing malicious code that poses significant security risks to any system where it is installed.
Vulnerability Detail
The vulnerability stems from the presence of embedded malicious code within the flip-prx package. This code can compromise the entire system, allowing unauthorized access to sensitive information such as secrets and keys. The origin of this vulnerability is linked to a malicious actor who has inserted harmful code into the package, making it a severe threat to any computer running it. Users are advised to treat any system with this package installed as fully compromised.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall flip-prxIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no effective workarounds to mitigate the risks associated with the flip-prx package. The only recommended action is to uninstall the package and rotate any sensitive information.
Conclusion
The flip-prx package contains malicious code that poses a serious security threat to any system where it is installed. Immediate action is required to uninstall the package and secure sensitive information. Users should remain vigilant and consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for flip-prx →
FAQ
The flip-prx package is an npm library used for proxying requests in JavaScript applications, enhancing API management.
The malicious code can compromise your entire system, allowing unauthorized access to sensitive information and potentially leading to data breaches.
You should immediately uninstall the flip-prx package and rotate any secrets or keys stored on the affected system.
No, there is currently no patched version available for the flip-prx package.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using just package-lock.json. You can check for vulnerabilities without signup at the Vulert playground.
