Malicious Code Detected in evony-resources-hack513 Package
Summary
MAL-2025-20013: Malicious code in evony-resources-hack513 (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The evony-resources-hack513 package is an npm library designed to assist users in managing resources for the game Evony. It provides various functionalities that enhance gameplay by automating resource collection and management. However, this package has been identified to contain malicious code, posing significant risks to users who install it.
Vulnerability Detail
The vulnerability stems from the inclusion of malicious code within the evony-resources-hack513 package. This code can potentially compromise user data, lead to unauthorized access, or facilitate other malicious activities. The issue was introduced in version 0 and affects all subsequent versions, making it critical for users to address this vulnerability promptly.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall evony-resources-hack513If it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can avoid using the evony-resources-hack513 package and seek alternative packages that provide similar functionalities without the associated risks. Additionally, users can monitor their applications for vulnerabilities using tools like Vulert, which can analyze the package-lock.json file to detect potential threats.
Conclusion
The evony-resources-hack513 package has been identified as containing malicious code, posing a significant risk to users. It is crucial to uninstall the package and monitor for updates or alternatives to ensure the security of your application.
See every vulnerability recorded for evony-resources-hack513 →
FAQ
It is an npm package designed to help players manage resources in the game Evony.
The malicious code can compromise user data and lead to unauthorized access.
You can use the Vulert playground to analyze your package-lock.json file for vulnerabilities without needing to sign up.
You should uninstall the evony-resources-hack513 package immediately to protect your application.
Yes, consider looking for other npm packages that offer similar functionalities without the security risks.
