Malicious Activity Detected in demo-vault-backup-webapp Package
Summary
MAL-2025-6281: Malicious code in demo-vault-backup-webapp (npm). Affects demo-vault-backup-webapp versions >= 1.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The demo-vault-backup-webapp is an npm package designed for web applications that facilitate the backup of vault data. It is intended to provide users with a seamless experience in managing their backup processes. However, this package has been identified to communicate with a domain associated with malicious activities, raising significant security concerns for users and their data.
Vulnerability Detail
The vulnerability arises from the package's communication with a domain linked to malicious activities. This could potentially lead to data breaches, unauthorized access, or other security incidents, as the package may inadvertently expose sensitive information or allow for exploitation by malicious actors. The issue was introduced in version 1.0.0 of the package.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall demo-vault-backup-webappIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you may consider removing the demo-vault-backup-webapp package from your project until a secure version is released. This can be done using the command: npm uninstall demo-vault-backup-webapp.
Conclusion
The demo-vault-backup-webapp package has been identified with a vulnerability that allows communication with a malicious domain. Users are advised to update the package or remove it from their projects to safeguard their data. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for demo-vault-backup-webapp →
FAQ
It is an npm package used for managing the backup of vault data in web applications.
The package communicates with a domain linked to malicious activities, which may compromise user data.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without needing to sign up.
Consider uninstalling the package as a temporary measure to mitigate risks until a secure version is available.
You can check the package's repository on npm or GitHub for any updates or security patches.
