Malicious Code Detected in xpack-subscription-test Package - Version 1.0.1
Summary
MAL-2026-734: Malicious code in xpack-subscription-test (npm). Affects xpack-subscription-test versions 1.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The xpack-subscription-test package is an npm module designed for testing subscription features in applications. It is utilized by developers to simulate subscription scenarios and manage user access. However, this package has been flagged for malicious behavior, specifically for communicating with a domain linked to harmful activities, raising significant security concerns for users and their applications.
Vulnerability Detail
The vulnerability in the xpack-subscription-test package stems from its version 1.0.1, which has been identified as malicious by the OpenSSF Package Analysis project. This version communicates with a domain associated with malicious activities, potentially compromising the security of applications that utilize this package. The ramifications include unauthorized data access, potential data breaches, and exploitation of the affected systems, making it critical for users to address this vulnerability promptly.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall xpack-subscription-testIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can remove the xpack-subscription-test package from their project until a secure version is released. This can be done using the following command: npm uninstall xpack-subscription-test.
Conclusion
The xpack-subscription-test package version 1.0.1 has been flagged for malicious behavior, posing significant security risks. Users are urged to uninstall the package and monitor for updates. Utilizing tools like Vulert can help in identifying vulnerabilities in your applications effectively.
See every vulnerability recorded for xpack-subscription-test →
FAQ
xpack-subscription-test is an npm module used for testing subscription features in applications.
It is considered malicious because it communicates with a domain associated with harmful activities.
Using the vulnerable version can lead to unauthorized data access, data breaches, and exploitation of your application.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Check your application by visiting the Vulert playground at Vulert Scanner without needing to sign up.
It is advisable to uninstall the xpack-subscription-test package temporarily until a secure version is released.
