Malicious Code Detected in adril7122 Package - Security Alert
Summary
MAL-2025-14113: Malicious code in adril7122 (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The adril7122 package is an npm library that is designed for specific functionalities within JavaScript applications. However, it has been identified as containing malicious code, which poses a significant risk to users and applications that rely on it. The presence of such code can lead to unauthorized access, data breaches, and other security vulnerabilities.
Vulnerability Detail
The vulnerability in the adril7122 package stems from the inclusion of malicious code that can execute harmful actions within the user's environment. This code can compromise the integrity of applications, leading to potential data theft, unauthorized access, and exploitation of system resources. The malicious nature of this code was confirmed through security assessments, highlighting the urgent need for users to address this issue.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall adril7122If it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can replace the adril7122 package with an alternative library that provides similar functionality without the associated risks. Additionally, ensure that your application is regularly scanned for vulnerabilities using tools like Vulert, which can monitor your package-lock.json for real-time alerts on open-source vulnerabilities.
Conclusion
The adril7122 package has been identified as containing malicious code, posing significant risks to applications that utilize it. Users are urged to remove the package and monitor for updates or alternative solutions. Utilizing tools like Vulert can enhance your security posture by providing real-time vulnerability alerts.
See every vulnerability recorded for adril7122 →
FAQ
The adril7122 package is an npm library used in JavaScript applications, but it has been found to contain malicious code.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor vulnerabilities without requiring any signup.
If you have installed adril7122, you should remove it immediately and look for alternative packages that do not pose security risks.
Currently, there is no patch available for the adril7122 package. Users are advised to remove the package until a secure version is released.
Vulert uses your package-lock.json file to monitor and alert you in real-time for open-source vulnerabilities in your software, helping you maintain security.
