Malicious Code Vulnerability in proleis-web-app: Security Risk Alert
Summary
MAL-2026-1825: Malicious code in proleis-web-app (npm). Affects proleis-web-app versions 10.0.1 – 10.1.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
proleis-web-app is an npm package designed for web application development, providing essential tools and functionalities for developers. However, it has been identified as containing malicious code, which poses a significant security risk to applications utilizing this package. The vulnerability affects specific versions, making it crucial for users to be aware of their current package version.
Vulnerability Detail
The vulnerability in proleis-web-app stems from the inclusion of malicious code that can compromise the integrity of applications using this package. This code can lead to unauthorized access, data breaches, or other malicious activities. The affected versions are 10.0.1 and 10.1.0, which have been flagged for containing this harmful code. Users should be vigilant as this vulnerability can have severe ramifications for application security.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall proleis-web-appIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If immediate updating is not feasible, consider temporarily removing the proleis-web-app package from your project until a secure version is available. You can do this by running: npm uninstall proleis-web-app.
Conclusion
The proleis-web-app package has been identified as containing malicious code, posing a significant security risk. Users are advised to update to a secure version or remove the package until a fix is available. Staying informed and proactive is essential to maintaining application security.
See every vulnerability recorded for proleis-web-app →
FAQ
The affected versions are 10.0.1 and 10.1.0.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Consider removing the package temporarily until a secure version is available.
Using the affected package can lead to unauthorized access, data breaches, and other malicious activities.
You can find detailed information on the GitHub repository of the malicious packages or by visiting the ReversingLabs website.
