Malicious code in airslate-api-client (npm)
Summary
MAL-2023-8446: Malicious code in airslate-api-client (npm). Affects airslate-api-client versions 9.9.9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The airslate-api-client is an npm package that provides functionality for interacting with the Airslate API. It is commonly used by developers to integrate Airslate's workflow automation capabilities into their applications. The package allows users to create, update, and manage workflows, documents, and other resources within the Airslate platform. However, the package has been found to contain malicious code, which poses a significant security risk to any computer that has it installed or running.
Vulnerability Detail
The malicious code in the airslate-api-client package has been identified as a serious security threat. Any computer that has this package installed or running should be considered fully compromised. The code may have given outside entities full control of the computer, potentially exposing all secrets and keys stored on that machine. It is crucial to rotate all affected secrets and keys immediately from a different computer. While removing the package is recommended, it cannot guarantee the removal of all malicious software resulting from its installation.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall airslate-api-clientIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to follow the recommended steps for fixing the issue and securing the affected computer.
Conclusion
The presence of malicious code in the airslate-api-client package poses a severe security risk to any computer with the package installed or running. It is crucial to take immediate action by rotating all affected secrets and keys, uninstalling the package, and conducting a thorough security audit. Implementing additional security measures is also essential to prevent future attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for airslate-api-client →
FAQ
The airslate-api-client is an npm package that enables developers to interact with the Airslate API and integrate Airslate's workflow automation capabilities into their applications.
The malicious code in airslate-api-client compromises the security of the affected computer, potentially giving outside entities full control. It is crucial to rotate all secrets and keys stored on the machine and conduct a thorough security audit.
If you have airslate-api-client installed, you should immediately rotate all secrets and keys stored on the affected computer from a different, secure machine. Uninstall the package and conduct a security audit.
While removing the airslate-api-client package is recommended, it cannot guarantee the removal of all malicious software resulting from its installation. A thorough security audit is necessary to identify and remove any remaining threats.
In addition to fixing the vulnerability and conducting a security audit, it is recommended to implement endpoint protection, network monitoring, and user access controls to enhance overall security and prevent future attacks.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
