Malicious Code Detected in nf-cl-ls Package: Version 99.0.1 Compromised
Summary
MAL-2026-1579: Malicious code in nf-cl-ls (npm). Affects nf-cl-ls versions 99.0.1 – 99.0.5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The nf-cl-ls package is a Node.js library available through npm, designed for various functionalities related to command-line interactions. It is widely used in JavaScript projects for its ease of integration and utility. However, version 99.0.1 of this package has been flagged for malicious behavior, specifically for communicating with a domain linked to malicious activities, raising significant security concerns for developers and users relying on this package.
Vulnerability Detail
The vulnerability in the nf-cl-ls package stems from its version 99.0.1, which has been identified as malicious by the OpenSSF Package Analysis project. This version communicates with a domain associated with malicious activities, potentially leading to data breaches, unauthorized access, or other security threats. The origin of this vulnerability is linked to the package's code, which has been compromised to facilitate harmful interactions with external servers.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall nf-cl-lsIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can remove the nf-cl-ls package from their project until a secure version is confirmed. This can be done using the following command:
npm uninstall nf-cl-ls
Alternatively, consider using a different package that offers similar functionality without the associated risks.
Conclusion
The nf-cl-ls package version 99.0.1 has been identified as malicious, posing significant security risks to users. It is essential to update to a secure version or remove the package until a fix is available. Regular monitoring of dependencies using tools like Vulert can help maintain the security of your applications.
See every vulnerability recorded for nf-cl-ls →
FAQ
nf-cl-ls is a Node.js library available on npm, used for various command-line functionalities in JavaScript projects.
You can check if your application is affected by using Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to analyze your package-lock.json without any signup.
If immediate updates are not possible, consider uninstalling the nf-cl-ls package or using an alternative package until a secure version is available.
Using the compromised version can lead to data breaches, unauthorized access to sensitive information, and other security threats due to its communication with malicious domains.
Utilize tools like Vulert, which provides real-time alerts for open-source vulnerabilities in your software, ensuring you are always aware of potential risks.
