Malicious Code Detected in approval-workflow Package - Security Alert
Summary
MAL-2025-14737: Malicious code in approval-workflow (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The approval-workflow package is an npm module designed to facilitate approval processes in workflows. It is commonly used in applications that require user validation before proceeding with certain actions. However, this package has been found to contain malicious code, posing a significant security risk to applications that utilize it.
Vulnerability Detail
The vulnerability in the approval-workflow package originates from the inclusion of malicious code that can compromise the security of applications using this package. This code may allow unauthorized access, data manipulation, or other harmful actions that could lead to data breaches or system integrity issues. The malicious code was introduced in all versions starting from 0, making it imperative for users to take immediate action.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall approval-workflowIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If an immediate update is not possible, consider removing the approval-workflow package from your project until a secure version is released. You can do this by running: npm uninstall approval-workflow.
Conclusion
The discovery of malicious code in the approval-workflow package poses a serious threat to applications that utilize it. Immediate action is required to mitigate risks, including updating or uninstalling the package. Stay informed about updates and utilize tools like Vulert for ongoing monitoring.
See every vulnerability recorded for approval-workflow →
FAQ
The approval-workflow package is an npm module used for managing approval processes in applications.
The malicious code can potentially allow unauthorized access and manipulation of application data.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Check your application using the Vulert playground at Vulert Scanner.
As of now, a patched version is not specified. Users should monitor the package repository for updates.
Consider uninstalling the approval-workflow package until a secure version is released.
