Critical Malicious Code Vulnerability in oneday-worm-research Package
Summary
MAL-2025-192849: Malicious code in oneday-worm-research (npm). Affects oneday-worm-research versions 1.0.0 – 1.0.4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The oneday-worm-research package is an npm library designed for research purposes related to worm behavior in software. It is utilized by developers and researchers to analyze and understand malicious code patterns. However, this package has been identified to contain malicious code, posing significant risks to users who integrate it into their applications.
Vulnerability Detail
The vulnerability stems from the presence of malicious code within the oneday-worm-research package. This code can execute harmful actions on the user's system, potentially leading to data breaches, unauthorized access, or system compromise. The affected versions include 1.0.0 through 1.0.4, which were identified as containing this malicious code. The origin of this vulnerability is linked to the package's distribution through npm, where it was uploaded with the intent to deceive users.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall oneday-worm-researchIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can replace the oneday-worm-research package with alternative libraries that provide similar functionality without the associated risks. It is crucial to thoroughly vet any replacement packages for security before integration.
Conclusion
The oneday-worm-research package has been identified as containing malicious code, posing significant risks to users. Immediate action is required to uninstall this package and seek alternatives. Utilizing tools like Vulert can help monitor for such vulnerabilities in the future.
See every vulnerability recorded for oneday-worm-research →
FAQ
It is an npm library used for research on worm behavior in software, but it has been found to contain malicious code.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Check your application against the vulnerability using the Vulert playground at Vulert Scanner.
You should uninstall the package immediately using npm uninstall oneday-worm-research and look for alternative libraries.
Currently, there are no patched versions available for this package. It is recommended to remove it from your project.
Vulert uses the package-lock.json file to monitor and alert in real-time for open-source vulnerabilities, ensuring your application remains secure.
