Malicious Code Injection in verify-aikn-simisa Package
Summary
MAL-2025-170268: Malicious code in verify-aikn-simisa (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The verify-aikn-simisa package is part of the npm ecosystem, commonly used for various JavaScript applications. It is designed to facilitate certain functionalities within the npm environment. However, this package has been identified as part of a malicious campaign that floods the npm registry with harmful scripts aimed at inflating developer reputation scores through the tea.xyz token reward system.
Vulnerability Detail
The vulnerability in the verify-aikn-simisa package stems from its association with a malicious campaign that modifies the package.json file to remove private flags and alters version numbers. It generates random package names, often themed around Indonesian culture, and continuously republishes these variants to pollute the npm registry. This not only compromises the integrity of the npm ecosystem but also poses risks to developers who may unknowingly use these compromised packages in their applications.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall verify-aikn-simisaIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can avoid using the verify-aikn-simisa package and replace it with a similar, trusted package that provides the required functionality. Always verify the integrity and reputation of packages before including them in your project.
Conclusion
The verify-aikn-simisa package has been identified as a malicious entity within the npm ecosystem, posing significant risks to developers and their applications. It is crucial to remove this package and ensure that your project relies on secure and reputable packages. Regular monitoring and auditing of dependencies can help maintain the integrity of your software.
See every vulnerability recorded for verify-aikn-simisa →
FAQ
The verify-aikn-simisa package is an npm package that has been identified as part of a malicious campaign aimed at inflating developer reputation scores.
You can check if your project is affected by using Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to analyze your package-lock.json without any signup.
If you have installed the verify-aikn-simisa package, you should uninstall it immediately using the command 'npm uninstall verify-aikn-simisa' and replace it with a trusted alternative.
Using compromised packages can lead to security vulnerabilities, data breaches, and potential exploitation of your application, affecting both your project and its users.
To prevent similar vulnerabilities, regularly audit your dependencies, use trusted sources for packages, and consider using tools like Vulert to monitor your projects for vulnerabilities.
