Critical Malicious Code Vulnerability in existdb Package
Summary
MAL-2025-20044: Malicious code in existdb (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The existdb package is an npm library designed for managing and interacting with the Exist database, which is a native XML database. It provides functionalities for storing, querying, and retrieving XML data efficiently. However, the package has been found to contain malicious code, posing significant security risks to applications that utilize it.
Vulnerability Detail
The existdb package has been identified to contain malicious code that can compromise the security of applications using it. This vulnerability originated from the introduction of harmful scripts within the package, which can lead to unauthorized access, data breaches, or exploitation of the host system. The malicious code can execute arbitrary commands, potentially allowing attackers to manipulate or steal sensitive information.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall existdbIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can remove the existdb package from your project until a secure version is available. You can do this by executing: npm uninstall existdb. Alternatively, consider using a different package that offers similar functionalities without the associated risks.
Conclusion
The existdb package has been compromised with malicious code, posing a significant risk to applications that utilize it. It is crucial to update the package to a secure version or consider alternative solutions to mitigate potential threats. Utilizing tools like Vulert can enhance your security posture by providing real-time vulnerability monitoring.
See every vulnerability recorded for existdb →
FAQ
The vulnerability involves malicious code embedded within the existdb package, which can lead to security breaches.
You can use the Vulert platform to monitor and alert for vulnerabilities in your application. Visit Vulert Scanner to check if your application is affected without any signup.
If immediate updates are not possible, consider uninstalling the existdb package and using an alternative solution until a secure version is released.
Vulert uses the package-lock.json file to monitor and alert in real-time for open-source vulnerabilities in your software, providing a proactive approach to security.
Uninstalling existdb may affect your application's functionality if it relies on this package. Ensure you have backups and consider alternatives before proceeding.
